forked from pool/element-desktop
Dominik Heidler
17bd855ca7
# Security - Fixes for https://github.com/element-hq/element-web/security/advisories/GHSA-w36j-v56h-q9pc - Fixes for https://github.com/element-hq/element-web/security/advisories/GHSA-5486-384g-mcx2 - Update JS SDK with the fixes for https://github.com/matrix-org/matrix-js-sdk/security/advisories/GHSA-xvg8-m4x3-w6xr Version 1.11.84 ## ✨ Features * Remove abandoned MSC3886, MSC3903, MSC3906 implementations (https://github.com/element-hq/element-web/pull/28274). Contributed by @t3chguy. * Update to React 18 (https://github.com/element-hq/element-web/pull/24763). Contributed by @t3chguy. * Deduplicate icons using Compound (https://github.com/element-hq/element-web/pull/28239). Contributed by @t3chguy. * Replace legacy Tooltips with Compound tooltips (https://github.com/element-hq/element-web/pull/28231). Contributed by @t3chguy. * Deduplicate icons using Compound Design Tokens (https://github.com/element-hq/element-web/pull/28219). Contributed by @t3chguy. * Add reactions to html export (https://github.com/element-hq/element-web/pull/28210). Contributed by @langleyd. * Remove feature\_dehydration (https://github.com/element-hq/element-web/pull/28173). Contributed by @florianduros. ## 🐛 Bug Fixes * Remove upgrade encryption in `DeviceListener` and `SetupEncryptionToast` (https://github.com/element-hq/element-web/pull/28299). Contributed by @florianduros. * Fix 'remove alias' button in room settings (https://github.com/element-hq/element-web/pull/28269). Contributed by @Dev-Gurjar. * Add back unencrypted path in `StopGapWidgetDriver.sendToDevice` (https://github.com/element-hq/element-web/pull/28295). Contributed by @florianduros. * Fix other devices not being decorated as such (https://github.com/element-hq/element-web/pull/28279). Contributed by @t3chguy. * Fix pill contrast in invitation dialog (https://github.com/element-hq/element-web/pull/28250). Contributed by @florianduros. * Close right panel chat when minimising maximised voip widget (https://github.com/element-hq/element-web/pull/28241). Contributed by @t3chguy. * Fix develop changelog parsing (https://github.com/element-hq/element-web/pull/28232). Contributed by @t3chguy. * Fix Ctrl+F shortcut not working with minimised room summary card (https://github.com/element-hq/element-web/pull/28223). Contributed by @t3chguy. * Fix network dropdown missing checkbox \& aria-checked (https://github.com/element-hq/element-web/pull/28220). Contributed by @t3chguy. OBS-URL: https://build.opensuse.org/package/show/devel:languages:nodejs/element-desktop?expand=0&rev=86
36 lines
1.9 KiB
Diff
36 lines
1.9 KiB
Diff
It is impossible to monkeypatch a shared copy of Electron, and in current versions of the nodejs-electron package
|
|
we intentionally fail the build of any app which tries to do this to alert the packager.
|
|
|
|
One problematic fuse which may break user data compatibility with upstream binaries is cookie encryption.
|
|
If a user runs an app with fused electron and then with unfused one, their cookies will get deleted.
|
|
|
|
OBSERVATION(dziobian):
|
|
Element creates a cookies sqlite database on startup but seems to never write anything to it.
|
|
Deleting the database manually seemed to have no effect.
|
|
|
|
--- element-desktop-1.11.65/electron-builder.ts.orig 2024-04-23 15:14:00.000000000 +0200
|
|
+++ element-desktop-1.11.65/electron-builder.ts 2024-05-16 18:51:14.513871208 +0200
|
|
@@ -75,22 +75,6 @@ const config: Writable<Configuration> =
|
|
const electronBinaryPath = path.join(context.appOutDir, `${executableName}${ext}`);
|
|
console.log(`Flipping fuses for: ${electronBinaryPath}`);
|
|
|
|
- await flipFuses(electronBinaryPath, {
|
|
- version: FuseVersion.V1,
|
|
- resetAdHocDarwinSignature: context.electronPlatformName === "darwin" && context.arch === Arch.universal,
|
|
-
|
|
- [FuseV1Options.EnableCookieEncryption]: true,
|
|
- [FuseV1Options.OnlyLoadAppFromAsar]: true,
|
|
-
|
|
- [FuseV1Options.RunAsNode]: false,
|
|
- [FuseV1Options.EnableNodeOptionsEnvironmentVariable]: false,
|
|
- [FuseV1Options.EnableNodeCliInspectArguments]: false,
|
|
-
|
|
- // Mac app crashes on arm for us when `LoadBrowserProcessSpecificV8Snapshot` is enabled
|
|
- [FuseV1Options.LoadBrowserProcessSpecificV8Snapshot]: false,
|
|
- // https://github.com/electron/fuses/issues/7
|
|
- [FuseV1Options.EnableEmbeddedAsarIntegrityValidation]: false,
|
|
- });
|
|
}
|
|
},
|
|
files: [
|