SecureBitChat/securebit-chat
1
0
Fork 0
Code Issues Pull Requests Actions 5 Packages Projects Releases Wiki Activity

Commit Graph

  • be1d02f1f7 release: v4.8.11 file transfer reliability fix main lockbitchat 2026-06-16 18:24:29 -04:00
  • 9244250835 ux(ice-test): clarify result when browser hides reflexive/relay candidates (Safari) lockbitchat 2026-06-16 01:50:40 -04:00
  • 6dac4ce52a fix(csp): allow stun:/turn: schemes in connect-src lockbitchat 2026-06-16 01:09:02 -04:00
  • 017a590220 fix(deploy): 404 missing assets instead of HTML fallback; ship public STUN config lockbitchat 2026-06-15 16:30:39 -04:00
  • d58967c671 build: add Fly.io deployment (nginx static serving) lockbitchat 2026-06-15 16:23:14 -04:00
  • 39aad6ae8b release: v4.8.10 user-configurable STUN/TURN servers lockbitchat 2026-06-15 16:05:31 -04:00
  • 7f2ecce57f feat: user-configurable STUN/TURN servers (advanced network settings) lockbitchat 2026-06-15 15:39:13 -04:00
  • 366f080128 release: v4.8.9 security hardening patch lockbitchat 2026-06-15 15:08:03 -04:00
  • d11f250257 release: v4.8.8 file transfer consent fix lockbitchat 2026-05-26 22:40:36 -04:00
  • 2468cb495e release: v4.8.7 WebRTC join reliability patch lockbitchat 2026-05-19 09:49:22 -04:00
  • 1cc873223a fix: stabilize manual WebRTC join flow lockbitchat 2026-05-18 19:49:57 -04:00
  • 01cb25f988 release: v4.8.6 security hardening patch lockbitchat 2026-05-17 23:30:41 -04:00
  • ad3bee5f2e fix: enforce service worker cache allowlist lockbitchat 2026-05-17 23:22:46 -04:00
  • f2a4276b31 fix: remove untracked disconnect timer lockbitchat 2026-05-17 23:16:14 -04:00
  • 86a96b0121 fix: harden service worker cache policy lockbitchat 2026-05-17 23:13:06 -04:00
  • 33f3764ec5 fix: synchronize WebRTC privacy mode state lockbitchat 2026-05-17 23:09:45 -04:00
  • a04a70eb97 fix: throttle inbound file chunks lockbitchat 2026-05-17 23:05:43 -04:00
  • 0fbcc240be fix: add inbound message rate limiting lockbitchat 2026-05-17 23:01:58 -04:00
  • 18022c6b68 fix: gate debug window hooks behind explicit flag lockbitchat 2026-05-17 22:58:21 -04:00
  • 026c81b775 chore: stop tracking node_modules lockbitchat 2026-05-17 18:03:10 -04:00
  • f71ff62417 fix: make WebRTC privacy mode explicit lockbitchat 2026-05-17 17:57:11 -04:00
  • ce48e8a851 fix: harden chat sanitization with DOMPurify lockbitchat 2026-05-17 17:52:36 -04:00
  • cc7f850e7d fix: bind SAS verification to DTLS fingerprint strings lockbitchat 2026-05-17 17:46:15 -04:00
  • 0a42aa13c3 release: prepare v4.8.5 security hardening release lockbitchat 2026-05-17 14:48:52 -04:00
  • 4b8c8829f1 Fix CSP errors, MIME types, and Service Worker issues lockbitchat 2026-01-06 23:01:32 -04:00
  • ebcf2dcaac New component with partner logos lockbitchat 2025-12-30 04:16:41 -04:00
  • f136d0db3d Update macOS download link and bump version to 4.7.56 lockbitchat 2025-12-30 01:34:51 -04:00
  • 91c292a6cf feat: implement comprehensive PWA force update system lockbitchat 2025-12-29 10:51:07 -04:00
  • 1b6431a36b Merge branch 'main' of https://github.com/SecureBitChat/securebit-chat lockbitchat 2025-12-28 20:30:12 -04:00
  • ee635da66f docs: Update README to v4.7.53 with Desktop Edition and roadmap updates lockbitchat 2025-12-28 20:28:22 -04:00
  • 92907732bf Add Shared Security Core information to README Volodymyr 2025-12-23 13:59:24 -04:00
  • 968fff9c61 Project Update: Transition to Desktop & Mobile Versions lockbitchat 2025-11-04 14:14:30 -04:00
  • 79c8d08782 fix: prevent encryption key loss and IndexedDB connection errors lockbitchat 2025-11-04 13:14:24 -04:00
  • 207e51361c security: increase PBKDF2 iterations from 100,000 → 310,000 (OWASP 2025 compliance) lockbitchat 2025-10-30 15:24:09 -04:00
  • 4583db39a2 feat(security): switch master key to non-extractable CryptoKey handle and remove direct access lockbitchat 2025-10-30 15:16:36 -04:00
  • 77ed4b3e4f remove key/hash logging and debug output from EnhancedSecureWebRTCManager and EnhancedSecureCryptoUtils lockbitchat 2025-10-30 14:55:46 -04:00
  • c7b16157fc Enhanced HKDF-based key derivation with improved security features - Implemented proper RFC 5869 compliant HKDF key derivation process - Added Perfect Forward Secrecy (PFS) key for enhanced session security - Improved key separation using unique info parameters for each derived key - Enhanced salt size from 32 to 64 bytes for increased entropy - Added comprehensive key validation and error handling - Implemented proper ECDH + HKDF integration following Web Crypto API best practices - Added metadata encryption key for enhanced data protection - Improved compatibility with modern cryptographic standards (RFC 7748, NIST SP 800-56A) -Enhanced logging and debugging capabilities for cryptographic operations - Maintained backward compatibility while upgrading security infrastructure Security improvements: - Cryptographic isolation between different key purposes - Enhanced protection against cross-key attacks - Improved resistance to future key compromise scenarios - Better compliance with OWASP cryptographic storage guidelines Technical details: - Refactored deriveSharedKeys() method for proper HKDF implementation - Updated WebRTC manager to use new messageKey API - Added comprehensive error handling and validation - Improved browser compatibility with standardized cryptographic operations - This update strengthens the existing security foundation with modern cryptographic practices while maintaining full system compatibility. lockbitchat 2025-10-27 15:18:15 -04:00
  • 3c2bac588c ci: switch mirror workflow to HTTPS token authentication lockbitchat 2025-10-20 12:51:27 -04:00
  • 2ae65eb749 ci: switch mirror workflow to HTTPS token authentication lockbitchat 2025-10-20 12:44:59 -04:00
  • 4a3249b2a6 test lockbitchat 2025-10-20 12:39:55 -04:00
  • 456545f055 Add GitHub Actions workflow to mirror repository to PrivacyGuides lockbitchat 2025-10-20 12:34:10 -04:00
  • 40381cc0a1 Increase session timeout to 60min and inactivity to 30min Fix sendMessage isUnlocked check to prevent immediate lock Move session extension logic to SecureMasterKeyManager Improve error messages Keep validation of crypto keys before encryption lockbitchat 2025-10-20 02:06:42 -04:00
  • 0d7835cfa2 fix: resolve incomplete multi-character sanitization in sanitizeMessage lockbitchat 2025-10-20 01:20:02 -04:00
  • 7604381584 fix: eliminate division on crypto random in getSafeRandomFloat lockbitchat 2025-10-20 01:10:25 -04:00
  • a7a5861e0a fix: replace modulo with bitwise mask in crypto random lockbitchat 2025-10-20 01:02:07 -04:00
  • 63a19e6a4c fix: resolve CodeQL biased crypto random warning lockbitchat 2025-10-20 00:51:03 -04:00
  • b18e943abd Fix cryptographic random bias in fingerprint mask generation lockbitchat 2025-10-20 00:42:12 -04:00
  • 9c1258cd1e Fix cryptographic random bias in fingerprint mask generation lockbitchat 2025-10-20 00:42:03 -04:00
  • 60e4bb6b8a Fix cryptographic random bias in getUnbiasedRandomInRange lockbitchat 2025-10-20 00:34:17 -04:00
  • 4233ba3d7e Fix cryptographic random bias (CodeQL js/biased-cryptographic-random) lockbitchat 2025-10-20 00:25:50 -04:00
  • 333c4b87b5 fix: improve sanitization to prevent XSS lockbitchat 2025-10-19 23:55:41 -04:00
  • 5096a09811 fix: improve sanitization to prevent XSS lockbitchat 2025-10-19 23:54:26 -04:00
  • 5c658cdd6c Security updates for CodeQL lockbitchat 2025-10-19 23:39:14 -04:00
  • e209d3e6f5 fix: improve sanitization to prevent XSS lockbitchat 2025-10-19 23:23:58 -04:00
  • 49e5a054cb fix: security and build improvements lockbitchat 2025-10-19 23:05:24 -04:00
  • 9d0372484a Add CodeQL security scanning workflow lockbitchat 2025-10-19 22:08:31 -04:00
  • 69fa5ffc28 Add CodeQL security scanning workflow lockbitchat 2025-10-19 22:04:07 -04:00
  • ed169b4c8c Add CodeQL security scanning workflow lockbitchat 2025-10-19 22:02:28 -04:00
  • 906562333e fix(ios): prevent chat crash when Notifications API is unavailable on iPhones - Guarded all Notification API usage to avoid ReferenceError on iOS Safari. - Set default permission to 'denied' when Notification is undefined. - Added early return in notification flow when Notifications API is unavailable. - Wrapped Notification.permission, requestPermission(), and new Notification(...) with typeof checks. - Updated SecureNotificationManager and app.jsx to degrade gracefully. - Verified build passes and chat loads correctly on iOS without notifications. lockbitchat 2025-10-19 20:51:44 -04:00
  • 4e7f5867b5 feat: implement automatic key generation on channel creation lockbitchat 2025-10-19 15:23:02 -04:00
  • 5ddfd1f5b3 fix(ios): prevent chat crash when Notifications API is unavailable on iPhones lockbitchat 2025-10-17 03:49:33 -04:00
  • 1acbc12a92 update version to v4.4.18 lockbitchat 2025-10-15 20:23:50 -04:00
  • 3ed8766fc9 v4.3.120 update lockbitchat 2025-10-15 20:15:41 -04:00
  • b087adfecc feat: implement secure browser notifications system lockbitchat 2025-10-15 19:58:28 -04:00
  • 5b5cc67fdc Push to Codeberg lockbitchat 2025-10-15 04:55:22 -04:00
  • 93e4b7ad19 test lockbitchat 2025-10-15 04:51:48 -04:00
  • fce18d27a5 Push to PrivacyGuides lockbitchat 2025-10-15 04:41:05 -04:00
  • 03e06f59dc Push to Codeberg lockbitchat 2025-10-15 04:30:18 -04:00
  • 5df6cb0d16 test ssh lockbitchat 2025-10-15 04:25:49 -04:00
  • 3730f46a08 test remote lockbitchat 2025-10-15 04:23:51 -04:00
  • abd6f9a7f5 Test mirror lockbitchat 2025-10-15 04:21:20 -04:00
  • 99469e5bd5 Remove experimental Bluetooth key transfer module - Deleted BluetoothKeyTransfer.js and related classes - Removed BluetoothKeyTransfer.jsx UI component - Cleaned up Bluetooth imports from app-boot.js and bootstrap-modules.js - Removed Bluetooth buttons and handlers from main app - Eliminated all Bluetooth functionality due to Web Bluetooth API limitations - Browsers cannot create GATT servers or advertise devices - Reduced bundle size by ~78KB - Application now focuses on supported browser technologies (QR codes, manual key exchange, WebRTC) lockbitchat 2025-10-15 04:13:14 -04:00
  • 2306b32482 Remove experimental Bluetooth key transfer module lockbitchat 2025-10-15 01:47:28 -04:00
  • cbb6a8fa31 Remove experimental Bluetooth key transfer module lockbitchat 2025-10-15 01:46:54 -04:00
  • 4be6fc55f5 Remove experimental Bluetooth key transfer module lockbitchat 2025-10-15 01:46:36 -04:00
  • cb62d8eb3b fix: resolve ReferenceError issues and improve disconnect functionality lockbitchat 2025-10-14 22:51:48 -04:00
  • ea8cf47118 Table update lockbitchat 2025-10-13 11:54:05 -04:00
  • d292c84829 session bug fix lockbitchat 2025-10-13 11:13:11 -04:00
  • 45de8ce285 refactor: implement minimal PWA caching strategy lockbitchat 2025-10-13 01:38:41 -04:00
  • 7af8f528ff refactor: implement minimal PWA caching strategy lockbitchat 2025-10-13 01:35:32 -04:00
  • d24d578321 feat: Add comprehensive iOS PWA splash screen support lockbitchat 2025-10-09 20:49:04 -04:00
  • dd9f13ab59 Add Browser Extension block lockbitchat 2025-10-09 05:09:17 -04:00
  • 2e5b078bc2 UX/UI updates and bug fixes lockbitchat 2025-10-08 17:23:54 -04:00
  • 75fa1cd27d Qr generator create bug fix lockbitchat 2025-10-08 01:24:04 -04:00
  • 60db79d2ae v4.3.120 update lockbitchat 2025-10-08 00:17:53 -04:00
  • 204e1edd9a Update version to 4.3.120 UX/UI 4.3.120 lockbitchat 2025-10-08 00:08:13 -04:00
  • 5b557102b4 Fix QR scanner multi-chunk processing and binary data handling lockbitchat 2025-10-07 23:58:54 -04:00
  • e6d6576d70 Render loading state if not ready lockbitchat 2025-10-06 14:35:13 -04:00
  • d2830b9c46 Optimize JSON and QR codes lockbitchat 2025-10-05 06:21:14 -04:00
  • ec04bebf22 Update UX/UI slider lockbitchat 2025-10-03 00:07:11 -04:00
  • 8cd78a2aba Update slider UX/UI lockbitchat 2025-10-02 21:34:45 -04:00
  • 4359e5fab1 Add Testimonials section with user feedback lockbitchat 2025-10-02 19:39:40 -04:00
  • 78769b58ef UX/UI update lockbitchat 2025-10-02 16:58:09 -04:00
  • afc873761f update lockbitchat 2025-10-02 16:52:42 -04:00
  • 7682f57889 feat(ui): add glowing border effect and improve card hover interactions lockbitchat 2025-10-02 16:52:31 -04:00
  • 6bed472e09 feat(security): implement core crypto and logging hardening lockbitchat 2025-10-02 03:25:38 -04:00
  • 65cc136b99 chore: remove debug logging and disable debug mode for production lockbitchat 2025-10-02 01:43:32 -04:00
  • 5ce6db1640 update lockbitchat 2025-10-01 23:27:59 -04:00
  • 0dde4906d9 update UX/UI lockbitchat 2025-10-01 23:26:07 -04:00
  • 0a7a830b52 Update UX/UI landing page lockbitchat 2025-10-01 20:20:15 -04:00