Comments (2)
Thanks for the effort to maintain the Nix package and notify us of this security flaw π. Some of these CVEs are not really that critical in case of Caprine since we don't render any custom HTML pages, let alone ones created by the user (any links are actually open separately in the default browser). We will continue to update Electron so we're up to date with all security fixes but I think it's good to know that they are not always that critical, it generally depends on the app π.
Besides this, I'm planning on refactoring the codebase to use a JS builder so we could use ES instead of CommonJS modules which most of our dependencies currently use but Electron does not support. That way we could more easily update all other dependencies too and have all the latest security fixes.
from caprine.
And also, in the last issue on nixpkgs repo I saw that you made the binary package instead of one built from source since you had some trouble building the app. I'm not that experiences with NixOS but if I could be of any help, don't hesitate to reach out! π You can contact me via email on my GitHub profile or the Matrix account from my website.
from caprine.
Related Issues (20)
- Add XDG autostart support HOT 1
- Arch repo
- Encrypted messages are not displayed after re-launch HOT 2
- "Synch now" button does not work. HOT 1
- Caprine opens with message list not showing at all. It just keeps loading with a blank screen. HOT 1
- Block seen and typing indicator, Vibrancy, White/Dark tΞΏggle shortcut (Cmd+D), Notification preview, Messenger Preferences
- Caprine turned to a white blank window HOT 1
- CAPRINE ne fonctionne pas avec le chiffrement de bout en bout HOT 1
- Can't syncronize messages HOT 1
- Input Box for One time code is not showing. HOT 1
- [BUG] View options don't work as intended
- Cant sync messages HOT 3
- Dark mode theme doesn't fit in window HOT 2
- search shortcut does not work on caprine HOT 1
- CAPRINE PRO ISSUE HOT 2
- Frequently switches to Marketplace window, even when in the background HOT 1
- Problem with synchronization of messages HOT 1
- When I scroll down the messages in a chat, the list of chats on the left moves up and disappears
- [BUG] Ctrl+R or auto refresh shuts down caprine
- images uploaded do not show to other people
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
π Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. πππ
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google β€οΈ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from caprine.