🛂(frontend) secure download button

Blocknote download button opens the file in a new
tab, which could be not secure because of XSS attacks.
We replace the download button with a new one that
downloads the file instead of opening it in a new tab.
Some files are flags as unsafe (SVG / js / exe),
for these files we add a confirmation modal before
downloading the file to prevent the user from
downloading a file that could be harmful.
In the future, we could add other security layers
from this model, to analyze the file before
downloading it by example.
This commit is contained in:
Anthony LC
2025-02-28 11:38:12 +01:00
committed by Anthony LC
parent ebd49f05a8
commit d099d58f77
7 changed files with 288 additions and 13 deletions

View File

@@ -11,6 +11,7 @@ and this project adheres to
## Added
- 💄(frontend) add error pages #643
- 🔒️ Manage unsafe attachments #663
- ✨(frontend) Custom block quote with export #646
- ✨(frontend) add open source section homepage #666