github ankitects/anki 26.09

4 hours ago

What's Changed

Security Fixes

⚠️ This update contains important security fixes. Please upgrade as soon as possible.

  • Notes had the ability to read local files when viewed in the editor. (Thanks to @caleblee789 for the report)
  • The "Open image" context menu action in the editor did not validate the file's extension, which allowed decks to execute dangerous files on some systems. (Thanks to @lappas-m for the report)

Add-on Compatibility Note

The following legacy modules have been removed: anki.importing and anki.exporting. See the docs for alternatives.

Some compatibility wrappers were added but they were only tested with AnkiConnect add-on and will be removed in the future.

Notable Changes

Other Fixes

  • Fix HTML dropdowns/datepickers growing indefinitely with scaled UI on Windows by @abdnh in #5396
  • Fix macOS/Linux crashes when the SIGPIPE signal is triggered (reported in some add-ons) by @abdnh in #5545
  • Fix the deck selector in the Stats screen not refreshing graphs in some cases by @iamllama in #5486
  • Disallow future dates in "Ignore cards reviewed before" by @Luc-Mcgrady in #5294
  • Fix font size in the FSRS simulator graph by @Luc-Mcgrady in #5099
  • Improve display of error messages in the CSV import screen by @MendezCarl in #5484
  • Hide FSRS-only sort orders in filtered deck dialog when FSRS is disabled by @zaveshaa in #5407
  • Refresh the reviewer toolbar's background after theme changes by @jamesliuai in #5241
  • Add wrappers for the AnkiPackageImporter/AnkiPackageExporter APIs for compatibility with the AnkiConnect add-on by @abdnh in #5547
  • Relax CSP restrictions to allow iframes in decks to load CSS styles by @twwn in #5525
  • Update to Qt 6.11.2 by @abdnh in #5539
  • Write logs to crash.log in the base Anki folder after crashes by @abdnh in #5546
  • Fix audio copy & paste handling in the experimental editor by @iamllama in #5337
  • Hide ease when FSRS is enabled but there is no memory state by @Luc-Mcgrady in #5277
  • Improve error reporting for the Tools>Check for Updates feature by @abdnh in #5295
  • Update FSRS memory state when card info opened by @Luc-Mcgrady in #5326
  • Fix MSI install is blocked if uninstall.exe exists at a drive root by @abdnh in #5360
  • Fix MathJax lazy loading causing flickering in some templates by @iamllama in #5254
  • Fix Add/Edit screens not closing in the experimental editor on some systems by @iamllama in #5373
  • Treat $ literally in non-regex find&replace replacements by @krMaynard in #5216
  • Fix experimental editor not playing pasted/dropped audio by @abdnh in #5329
  • Fix calendar graph year navigation buttons position in RTL layouts by @iDavi in #5103
  • Mirror help icon for arabic script rtl langs by @iDavi in #5105
  • Mirror toggle switches in RTL layouts by @iDavi in #5214
  • Apply RTL direction for some languages such as Uyghur in webview pages by @abdnh in #5274
  • Set webview font size to system font size in preferences menu by @GithubAnon0000 in #5174
  • Preserve scroll position after collapsing/expanding decks by @abdnh in #5378
  • Separate add-on entries in Tools menu with separator by @qais8r in #5124
  • Rename Markdown deck description checkbox to be clearer by @zaveshaa in #5489
  • Update redirected Browse Add-ons URL by @schmidhauser in #5290
  • Add a plural form for the tags field label in the editor by @Arthur-Milchior in #5305
  • Preserve pasted editor images and respect their format preference in the experimental editor by @praxish in #5568
  • Prefer packaged add-on name for AnkiWeb installs by @schmidhauser in #5362
  • Ensure editor is initialized before triggering browser hooks by @abdnh in #5348
  • Avoid KeyError on missing Content-type header in mediasrv by @fernandolins in #5366
  • Replace asserts inside except clauses with explicit error handling by @fernandolins in #5365
  • Use 'Add Media' string for the title of the media file picker in the editor by @abdnh in #5402

Documentation Changes

Development Changes

New Contributors

Full Changelog: 26.08.1...26.09

Don't miss a new anki release

NewReleases is sending notifications on new releases.