v24.11.2

CHANGELOG.txt

@@ -1,3 +1,9 @@
+#----v24.11.2----#
+-Add keyboard shortcuts
+-Improve UI/UX
+-Improve code structure
+-Bug/Security fixes
+
 #----v24.11.1----#
 -Improve UI/UX
 -Bug/Security fixes

README.md

@@ -32,7 +32,7 @@ The website follows [OWASP security recommendations](https://cheatsheetseries.ow
 
 User's connections are managed with secure cookies and tokens.
 
-All notes are sanitized and validated through the DOMPurify library. All notes are encrypted with AES-256-GCM. Each user has a unique 32-byte randomly generated encryption key generated after signing up.
+All notes are sanitized and validated through the DOMPurify library. All notes are encrypted with AES-256-GCM. Each user has a cryptographically secure key generated after signing up.
 
 Users can lock the app using biometrics (fingerprints, face, etc.). These biometric data are never sent to the server.
 
@@ -51,3 +51,5 @@ If you find [issues](https://github.com/seguinleo/Bloc-notes/issues), [vulnerabi
 > The website is available at localhost:8787, but if you want to deploy it on a server with a domain name or an IP address, you need to install a SSL certificate to use note encryption (Web Crypto API requires HTTPs). Edit all users, passwords and Docker configurations for production. To store user encryption keys, I recommend using a secure vault like AWS KMS, Azure Key Vault or a self-hosted solution instead of the database.
 
 ![Desktop preview](https://github.com/seguinleo/Bloc-notes/blob/main/src/assets/img/desktop.png)
+
+A big thank you to [DOMPurify](https://github.com/cure53/DOMPurify) and [marked](https://github.com/markedjs/marked)!

src/.gitignore

@@ -1,6 +1,16 @@
-.env
-.env.local
-.htaccess
+# See https://help.github.com/articles/ignoring-files/ for more about ignoring files.
+
+# build
+/build/
+/dist/
+/public/
 
+# dependencies
+/vendor/
 node_modules/
-vendor/
+npm-debug.log
+yarn-error.log
+
+# env
+.env*.local
+.htaccess

src/assets/js/cloud/script.js

@@ -446,15 +446,17 @@ const pin = async (noteId) => {
 };
 
 const deleteNote = (noteId) => {
-  if (!noteId) return;
-  let message = '';
-  if (defaultScript.lang === 'fr') message = 'Êtes-vous sûr de vouloir supprimer cette note ?';
-  else if (defaultScript.lang === 'de') message = 'Möchten Sie diese Notiz wirklich löschen?';
-  else if (defaultScript.lang === 'es') message = '¿Estás seguro que quieres eliminar esta nota?';
-  else message = 'Do you really want to delete this note?';
-  if (window.confirm(message)) fetchDelete(noteId);
+  document.querySelector('#delete-note-popup-box').showModal();
+  document.querySelector('#id-note-delete').value = noteId;
 };
 
+document.querySelector('#delete-note').addEventListener('submit', async () => {
+  const noteId = document.querySelector('#id-note-delete').value;
+  if (!noteId) return;
+  await fetchDelete(noteId);
+  document.querySelector('#delete-note-popup-box').close();
+});
+
 document.querySelector('#manage-account').addEventListener('click', () => {
   document.querySelector('#manage-popup-box').showModal();
 });