Added
- Switched sanitization to DOMPurify (local vendored file in
resources/vendor/purify.min.js). - Added support for multiple Host entries and multiple Network entries (same UX style as config locations).
- Added dynamic Custom Notes rows:
- Add/remove rows
- Per-row style settings
- Independent row ordering/visibility
- Added Emoji Sidebar:
- Copy-to-clipboard emoji chips
- Hide/show toggle with persisted state
- 5-column layout with a personal selection of potentially useful emojis
- Added local image upload support for icon mode:
.png,.jpeg/.jpg,.gif,.webp(File size limit 6KB, more is not possible due to character count limits)- existing SVG path still working as before
Changed
- Settings export now always writes current app version payload (no old-version export mode).
- Import behavior no longer disables logo/icon link feature globally; URL checks now enforce allowed image extensions.
- Small UI button adjustments
Security
- Sanitization flow for user fields and imported settings before preview rendering with DOMPurify bundle.
- Added import checks for settings structure and allowed field values.
- Icon URL validation restricted to allowed image file types.
Other
- Added upload error reporting in status area (instead of silent fail on oversized files).
- Added caching/TTL around GitHub API requests (stars/update checks) to reduce rate-limit pressure.
- Simplified and deduplicated parts of
app.jsaround row handling/import compatibility.