hyungyunlim/obsidian-social-archiver-releases 2.8.3

on GitHub

2.8.3

Security

• Hardened protocol handler URL validation against domain spoofing (e.g., facebook.com.evil.com no longer passes validation)
• Added protocol check to only allow http: / https: URLs
• Refactored isValidUrl() to delegate to the canonical platform detection system instead of a separate hardcoded domain list

Thanks to @wonbywondev for identifying the domain validation vulnerability (#7)

Transcript Player

• Timeline cards no longer show raw transcript text — transcripts are now displayed exclusively in the dedicated transcript player
• Fixed YouTube transcript timestamp handling: auto-detects whether values are in milliseconds or seconds
• Improved transcript section parsing to correctly stop at metadata footers
• Added support for emoji-prefixed headers (## 📄 Transcript)

Whisper Detection

• Skips non-existent filesystem paths during Whisper binary detection, reducing startup noise
• Suppressed command-not-found debug log spam

Other

• Added CONTRIBUTING.md to guide external contributors on the repo architecture