1
0
mirror of https://github.com/bitwarden/browser synced 2026-02-19 10:54:00 +00:00
Commit Graph

20647 Commits

Author SHA1 Message Date
Brad
bf87041881 [PM-31354] Fix Reports page loading (#18631)
* fix reports page loading

* update to signals, leave OnPush detection strategy
2026-02-17 09:39:27 -08:00
Brad
a2487059ab [PM-29952] Fix: Access Intelligence password change tasks progress bar (#18488)
* check tasks completed after report generation

* fix type safety
2026-02-17 09:39:27 -08:00
John Harrington
62ae8aded7 [PM-30922] Client changes to encrypt send access email list (#18486) 2026-02-17 09:39:27 -08:00
Vijay Oommen
924b777e36 PM-30539 created new component and added a filter (#18630) 2026-02-17 09:39:27 -08:00
renovate[bot]
f1d674ce02 [deps] Autofill: Update concurrently to v9.2.1 (#17540)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-02-17 09:39:27 -08:00
Alex
238f693ef0 [PM-31348] phish cleanup - Address code review feedback from PR #18561 (Cursor-based phishing URL search) (#18638) 2026-02-17 09:39:27 -08:00
Addison Beck
22e17129cb Revert "[PM-26821] Improve macOS fullscreen ux (#16838)" (#18606)
This reverts commit 05ca57d538.
2026-02-17 09:39:26 -08:00
Brad
e63b8fdd81 [PM-30918] Migrate DIRT components to new Angular control flow syntax (#18416)
* dirt: migrate apps/web components to new control flow

* dirt: update control flow bitwarden licensed code

* consolidate @if statements, use @else where appropriate

* more cleanup

* consolidate conditionals

* remove unnecessary conditional
2026-02-17 09:39:26 -08:00
Alex Dragovich
e6a08a3d01 [PM-31323] change text on toast for send link copy (#18617) 2026-02-17 09:39:26 -08:00
Jeffrey Holland
b2b29e0346 Remove ts-strict-ignore from fido2 page (#18146)
* Remove `ts-strict-ignore` from fido2 page

* Update typing issue

* Fix AssertCredentialResult type issue

* Remove non null assertions and add type guard

* Addresses topWindow non null assertion

* remove redundant check and remove ts strict from messenger

---------

Co-authored-by: Jonathan Prusik <jprusik@users.noreply.github.com>
Co-authored-by: Daniel Riera <driera@livefront.com>
2026-02-17 09:39:26 -08:00
Jason Ng
b90066d576 [PM-31253] Desktop Footer Tooltip Updates (#18580)
* update desktop archive and delete btns so tooltip shows on hover consistently.
2026-02-17 09:39:26 -08:00
Nik Gilmore
7e81c6a682 [PM-31282] Pass orgId through to API call when SDK feature flag is off (#18619) 2026-02-17 09:39:26 -08:00
Jared
97eee2edb9 Refactor autofill policy naming and update related translations (#18628)
- Renamed `activateAutofill` to `activateAutofillPolicy` in the policy order map and component.
- Updated corresponding translation keys in `messages.json` for consistency.
- Adjusted warning message in the `activate-autofill.component.html` to reflect the new naming convention.
2026-02-17 09:39:26 -08:00
Will Martin
de2f4a04fc [CL-82] rename bit-icon to bit-svg; create new bit-icon component for font icons (#18584)
* rename bit-icon to bit-svg; create new bit-icon for font icons

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

* find and replace current usage

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

* add custom eslint warning

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

* fix incorrect usage

* fix tests

* fix tests

* Update libs/components/src/svg/index.ts

Co-authored-by: claude[bot] <209825114+claude[bot]@users.noreply.github.com>

* Update libs/eslint/components/no-bwi-class-usage.spec.mjs

Co-authored-by: claude[bot] <209825114+claude[bot]@users.noreply.github.com>

* update component api

* update class name

* use icon type in iconButton component

* update type Icon --> BitSvg

* fix bad renames

* fix more renames

* fix bad input

* revert iconButton type

* fix lint

* fix more inputs

* misc fixes

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

* fix test

* add eslint ignore

* fix lint

* add comparison story

---------

Co-authored-by: Claude Sonnet 4.5 <noreply@anthropic.com>
Co-authored-by: claude[bot] <209825114+claude[bot]@users.noreply.github.com>
2026-02-17 09:39:25 -08:00
renovate[bot]
67ff1e1d85 [deps]: Update actions/setup-node action to v6 (#17038)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-02-17 09:39:25 -08:00
Jared
62b953eff4 [PM-31155] reorder policies in policies page (#18564)
* Refactor policy edit registration to centralize ownership and improve organization. Reordered policies for clarity and added new policies for enhanced functionality.

* Add PolicyOrderPipe for sorting policies and update policies component to utilize it

* Add organizationDataOwnership to POLICY_ORDER_MAP for policy sorting

* Fix PR comments
2026-02-17 09:39:25 -08:00
Matt Bishop
f7fc3b8a9b Have AppSec own Checkmarx config (#18623) 2026-02-17 09:39:25 -08:00
bmbitwarden
8093b4fe81 PM-29919 email verification on sends (#18260)
* PM-29919 email verification on sends

* PM-29919 resolved build issue

* PM-29919 refined who can view fields

* PM-29919 resolved lint issues

* PM-29919 resolved lint issues

* PM-29919 resolved unit tests

* PM-29919 resolved lint issues

* PM-29919 resolved unit test issue

* PM-29919 resolved pr comments

* PM-29919 resolved pr comments

* PM-29919 resolved unneeded label

* PM-29919 refactored to hide instead of disable

* PM-29919 resolved pr comments

* PM-29919 resolved no auth string in PM-31200

* PM-29919 resolved bugs
2026-02-17 09:39:25 -08:00
Mike Amirault
9085ae20d5 Tools/pm 29918/implement send auth flows (#18270)
* [PM-29918] Implement new Send auth flows

* [PM-29918] Fix types

* Trigger Claude code review

* [PM-29918] Address PR review comments

* [PM-29918] Remove duplicate AuthType const
2026-02-17 09:39:25 -08:00
Brandon Treston
0f6e477b36 [PM-28413] Remove feature flagged logic (#18566)
* clean up flagged logic

* fix test
2026-02-17 09:39:24 -08:00
Todd Martin
80451a0219 chore(flags): [PM-31326] Rename ipc-channel-framework feature flag
* Rename feature flag

* Not sure what happened here.  Renaming the class.
2026-02-17 09:39:24 -08:00
Jared
654f898659 Update loading spinner visibility in events component (#18560) (#18574) 2026-02-17 09:39:24 -08:00
renovate[bot]
b0d2236488 [deps] Vault: Update @types/koa-json to v2.0.24 (#17568)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-02-17 09:39:24 -08:00
Jared
2b46df6d50 Fix empty toast message when owner deletes himself (#18603) 2026-02-17 09:39:24 -08:00
Jordan Aasen
391f3b2070 [PM-26703]- Browser - Update autofill Behavior (#18467)
* apply changes to autofill

* fix tests

* fix and simplify logic
2026-02-17 09:39:23 -08:00
Conner Turnbull
cd884a1e8a [PM-31295] Remove price from next charge on individual subscription page (#18600)
* Remove price from next charge on individual subscription page

* Revert subscription-card changes, limit scope to legacy component
2026-02-17 09:39:23 -08:00
Dave
44947b43a3 feat(account-switching) [PM-5594]: Enabling account switching causes performance issues on safari (#18339)
* refactor(account-switching) [PM-5594]: Move account switching enabled flag to AccountSwitcherService to accommodate server-side feature flag.

* test(account-switching) [PM-5594]: Update tests to include ConfigService dependency for feature flag.

* refactor(account-switching) [PM-5594]: Remove compile-time account switching flags from browser.

* refactor(account-switching) [PM-5594]: Move initialization to ctor for strict.
2026-02-17 09:39:23 -08:00
renovate[bot]
120a1302d7 [deps] Platform: Update @types/node to v22.19.7 (#18567)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-02-17 09:39:23 -08:00
Isaiah Inuwa
f257d62c20 Add generic autofill provider library [PM-29786] (#18075)
* Rename macos_provider to autofill_provider

* Add autofill IPC client methods needed for Windows IPC
2026-02-17 09:39:23 -08:00
Jared
22c1887990 [PM-27909] dialog improvements for claim domain (#18535)
* Update domain status message from "Under verification" to "Pending" in localization and adjust corresponding template reference

* Update domain status message from "Under verification" to "Pending" in the admin console template

* Add domain verification instructions to the admin console dialog

Enhanced the domain add/edit dialog by including detailed instructions for the automatic domain claim process when the domain is not verified. Removed the previous callout component for a more streamlined user experience.

* Add new localization messages for automatic domain claim process

Included detailed instructions for the automatic domain claim process, covering the steps for claiming a domain, account ownership change, and consequences of unclaimed domains. This enhances user guidance during domain management.

* Refactor automatic domain claim process localization messages

Updated localization keys for the automatic domain claim process to improve clarity and consistency. Removed redundant messages and streamlined the instructions displayed in the admin console dialog for better user experience.
2026-02-17 09:39:23 -08:00
Jared
f0ddc8cc24 Refactor access tab label in collection dialog component to use a getter for improved readability and localization support. (#18537) 2026-02-17 09:39:22 -08:00
Jared
60cb7ffeb0 Add support for DuckDuckGo browser in event service (#18576) 2026-02-17 09:39:22 -08:00
Jared
40758c24ec [PM-16863] Update "auto-fill" to "autofill" for org policies (#18483)
* Fixes typo in messages.json from auto-fill to autofill to match company preference

* Strings have to be immutable as learned from Brandon. Trying to delete old key-value pair to see if that's possible

* Fix my typo
2026-02-17 09:39:22 -08:00
Jared McCannon
81db79f6f4 [PM-29805] - Rollback single org enablement when auto confirm enablement fails. (#18572) 2026-02-17 09:39:22 -08:00
Anders Åberg
7a04cdd08a PM-31294: Unlock Passkey using getWebVaultUrl over getHostname (#18597) 2026-02-17 09:39:22 -08:00
Oscar Hinton
3e95a25bd6 [PM-31264] Broken vault filters in milestone-1 (#18589)
* Fix vault filters

Now uses the same `createFilterFunction` as web rather than the custom proxy like approach.

* Remove provide
2026-02-17 09:39:22 -08:00
Brad
43fdd6d319 [PM-31182] Add HIBP icons URL to dev configuration for allowed Content-Security-Policy domains (#18565)
* add url for loading HIBP icons

* remove old hibp location
2026-02-17 09:39:21 -08:00
Jeffrey Holland
ce0b8bea34 [PM-28079] Add attributes to filter for the mutationObserver (#17832)
* [PM-28079] Add attributes to filter for the mutationObserver

* Update attributes based on Claude suggestions

* Updated remaining attributes

* Adjust placeholder check in `updateAutofillFieldElementData`

* Update ordering of constants and add comment

* Remove `tagName` and `value` from mutation logic

* Add new autocomplete and aria attributes to `updateActions`

* Fix autocomplete handlers

* Fix broken test for `updateAttributes`

* Order attributes for readability in `updateActions`

* Fix tests

---------

Co-authored-by: Jonathan Prusik <jprusik@users.noreply.github.com>
2026-02-17 09:39:21 -08:00
Mike Amirault
f7d5194e23 [PM-30375] Account for differences in RoboForm Windows desktop app CSV export headers (#18403) 2026-02-17 09:39:21 -08:00
lif
3ece6401ed fix(importer): preserve protected KeePass custom fields as hidden fields (#18136)
Protected fields (ProtectInMemory="True") were being appended to notes
when they exceeded 200 characters or contained newlines, instead of
being imported as hidden custom fields.

Now protected fields are always imported as hidden fields regardless
of their length or content, preserving their protected status.

Fixes #16897

Signed-off-by: majiayu000 <1835304752@qq.com>
Co-authored-by: John Harrington <84741727+harr1424@users.noreply.github.com>
2026-02-17 09:39:21 -08:00
Bryan Cunningham
4b2179a599 [PM-30640][PM-30641] update angular core and compiler (#18542)
Co-authored-by: Will Martin <contact@willmartian.com>
2026-02-17 09:39:21 -08:00
renovate[bot]
fd3cb8c0e5 [deps] Platform: Update tokio-tracing monorepo (#18238)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-02-17 09:39:21 -08:00
Maciej Zieniuk
6823ab27db [PM-27283] [BEEEP] Reactive availableVaultTimeoutActions$ in vault timeout settings (#17731)
* reactive `availableVaultTimeoutActions$` in vault timeout settings

* cleanup

* deprecation docs

* explicitly provided user id

* clearer mocking

* better docs
2026-02-17 09:39:20 -08:00
Anders Åberg
b794201599 Wire up DI for PRFUnlockService in desktop (#18587) 2026-02-17 09:39:20 -08:00
Nik Gilmore
9a09754771 [PM-30303] Migrate Cipher Delete Operations to use SDK (#18275) 2026-02-17 09:39:20 -08:00
Leslie Tilton
2eadb05d7e [PM-31203] Change Phishing Url Check to use a Cursor Based Search (#18561)
* Initial changes to look at phishing indexeddb service and removal of obsolete compression code

* Convert background update to rxjs format and trigger via subject. Update test cases

* Added addUrls function to use instead of saveUrls so appending daily does not clear all urls

* Added debug logs to phishing-indexeddb service

* Added a fallback url when downloading phishing url list

* Remove obsolete comments

* Fix testUrl default, false scenario and test cases

* Add default return on isPhishingWebAddress

* Added log statement

* Change hostname to href in hasUrl check

* Save fallback response

* Fix matching subpaths in links. Update test cases

* Fix meta data updates storing last checked instead of last updated

* Update QA phishing url to be normalized

* Filter web addresses

* Return previous meta to keep subscription alive

* Change indexeddb lookup from loading all to cursor search

* fix(phishing): improve performance and fix URL matching in phishing detection

Problem:
The cursor-based search takes ~25 seconds to scan the entire phishing database.
For non-phishing URLs (99% of cases), this full scan runs to completion every time.

Before these fixes, opening a new tab triggered this sequence:
1. chrome://newtab/ fires a phishing check
2. Sequential concatMap blocks while cursor scans all 500k+ URLs (~25 sec)
3. User pastes actual URL and hits enter
4. That URL's check waits in queue behind the chrome:// check
5. Total delay: ~50+ seconds for a simple "open tab, paste link" workflow

Even for legitimate phishing checks, the cursor search could take up to 25 seconds
per URL when the fast hasUrl lookup misses due to trailing slash mismatches.

Changes:

phishing-data.service.ts:
- Add protocol filter to early-return for non-http(s) URLs, avoiding
  expensive IndexedDB operations for chrome://, about:, file:// URLs
- Add trailing slash normalization for hasUrl lookup - browsers add
  trailing slashes but DB entries may not have them, causing O(1) lookups
  to miss and fall back to O(n) cursor search unnecessarily
- Add debug logging for hasUrl checks and timing metrics for cursor-based
  search to aid performance debugging

phishing-detection.service.ts:
- Replace concatMap with mergeMap for parallel tab processing - each tab
  check now runs independently instead of sequentially
- Add concurrency limit of 5 to prevent overwhelming IndexedDB while still
  allowing parallel execution

Result:
- New tabs are instant (no IndexedDB calls for non-web URLs)
- One slow phishing check doesn't block other tabs
- Common URL patterns hit the fast O(1) path instead of O(n) cursor scan

* performance debug logs

* disable custom match because too slow

* spec fix

---------

Co-authored-by: Alex <adewitt@bitwarden.com>
2026-02-17 09:39:20 -08:00
Todd Martin
146abcd0a7 chore(deps): Added override for package-lock.json 2026-02-17 09:39:20 -08:00
renovate[bot]
df4ea935ee [deps]: Update taiki-e/install-action action to v2.66.7 (#18570)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-02-17 09:39:20 -08:00
Nick Krantz
2f3c1a2b2d [PM-28060] Remove Skeleton Feature Flag (#18456)
* remove skeleton ff

* remove unneeded templates
2026-02-17 09:39:19 -08:00
Jordan Aasen
1592e2aaba [PM-29244] - don't use filename for download attachment label (#18444)
* don't use filename for download attachment label

* fix scroll position in browser vault

* Revert "fix scroll position in browser vault"

This reverts commit 8e415f2c89.

* fix test
2026-02-17 09:39:19 -08:00