Commit Graph
1091 Commits
Author SHA1 Message Date
Alam 02113e2579 Merge pull request #894 from nipunrajk/fix/markdown-task-list-links
fix(markdown): prevent task lists with links from corrupting DOM
2026-10-21 12:00:48 +05:30
alam00000 0d430027df feat: replace compression with Hyper Compress, fix PDF to Word color pass and stale engine URLs 2026-10-20 22:06:30 +05:30
Alam d6537217e6 Merge pull request #934 from alam00000/chore/update-sponsors
docs: update sponsors
2026-10-19 18:17:09 +05:30
alam00000 2dd3dd2d4b docs: update sponsors 2026-10-19 12:46:23 +00:00
alam00000 2f96455896 chore: stop tracking generated build files, fix sponsors workflow and refresh README hero 2026-10-19 18:14:45 +05:30
Alam eb6813108a Merge pull request #925 from alam00000/dependabot/npm_and_yarn/qs-6.16.1
build(deps-dev): bump qs from 6.15.0 to 6.16.1
2026-10-19 17:33:55 +05:30
alam00000 9aae81e73c Release v2.8.10 v2.8.10 2026-10-19 15:33:11 +05:30
dependabot[bot] 007095a6a6 build(deps-dev): bump qs from 6.15.0 to 6.16.1
Bumps [qs](https://github.com/ljharb/qs) from 6.15.0 to 6.16.1.
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ljharb/qs/compare/v6.15.0...v6.16.1)

---
updated-dependencies:
- dependency-name: qs
  dependency-version: 6.16.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
2026-10-19 09:57:52 +00:00
Alam 2f868d4d0e Merge pull request #932 from alam00000/chore/update-pdf-engine
build(deps): bump PDF engine and viewer to 051abe5b72a9
2026-10-19 15:25:18 +05:30
alam00000 2be3d6858c build(deps): bump PDF engine and viewer to 051abe5b72a9 2026-10-19 09:46:51 +00:00
alam00000 edd959f345 fix(security): harden sanitize, flatten, redaction, signature validation, CSP, proxies and CI 2026-10-19 14:45:00 +05:30
alam00000 b0a186839a fix: change CLA signature storage branch to 'cla-signatures' 2026-10-19 13:20:31 +05:30
alam00000 70dc47d25c feat: update GitHub Actions workflow for PDF engine and viewer 2026-10-19 13:17:07 +05:30
alam00000 231c012e99 fix(ci): avoid rate limits 2026-10-19 02:07:51 +05:30
Alam 6a75673cbe Merge pull request #927 from alam00000/dependabot/npm_and_yarn/source-map-js-1.2.2
build(deps): bump source-map-js from 1.2.1 to 1.2.2
2026-10-19 02:03:10 +05:30
Alam 66f3628811 Merge pull request #926 from alam00000/dependabot/npm_and_yarn/handlebars-4.7.10
build(deps-dev): bump handlebars from 4.7.9 to 4.7.10
2026-10-19 02:02:59 +05:30
alam00000 4c314b8a13 Update service worker cache version 2026-10-19 01:07:55 +05:30
alam00000 0584def180 Release v2.8.9 v2.8.9 2026-10-19 00:52:15 +05:30
github-actions[bot] ccdb4dd8e5 @cosark has signed the CLA in alam00000/bentopdf#904 2026-10-18 05:25:07 +00:00
dependabot[bot] 733c4f0bf9 build(deps): bump source-map-js from 1.2.1 to 1.2.2
Bumps [source-map-js](https://github.com/7rulnik/source-map-js) from 1.2.1 to 1.2.2.
- [Release notes](https://github.com/7rulnik/source-map-js/releases)
- [Changelog](https://github.com/7rulnik/source-map-js/blob/main/CHANGELOG.md)
- [Commits](https://github.com/7rulnik/source-map-js/compare/v1.2.1...v1.2.2)

---
updated-dependencies:
- dependency-name: source-map-js
  dependency-version: 1.2.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
2026-10-17 21:02:32 +00:00
dependabot[bot] dde07a28bd build(deps-dev): bump handlebars from 4.7.9 to 4.7.10
Bumps [handlebars](https://github.com/handlebars-lang/handlebars.js) from 4.7.9 to 4.7.10.
- [Release notes](https://github.com/handlebars-lang/handlebars.js/releases)
- [Changelog](https://github.com/handlebars-lang/handlebars.js/blob/v4.7.10/release-notes.md)
- [Commits](https://github.com/handlebars-lang/handlebars.js/compare/v4.7.9...v4.7.10)

---
updated-dependencies:
- dependency-name: handlebars
  dependency-version: 4.7.10
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
2026-10-17 12:24:15 +00:00
github-actions[bot] 6ce0d69ba5 @oa-cmu has signed the CLA in alam00000/bentopdf#921 2026-10-17 02:57:30 +00:00
github-actions[bot] 167b7e8f90 @kelseyjmw has signed the CLA in alam00000/bentopdf#919 2026-10-16 16:22:48 +00:00
github-actions[bot] b5a69f9191 @sadfun has signed the CLA in alam00000/bentopdf#917 2026-10-15 12:08:26 +00:00
github-actions[bot] 2651471a84 @sergitost10 has signed the CLA in alam00000/bentopdf#916 2026-10-15 08:06:09 +00:00
github-actions[bot] 872a32929e @anishgowda21 has signed the CLA in alam00000/bentopdf#914 2026-10-14 06:42:53 +00:00
alam00000 46bf0fbb57 Enforce file origin check in annotation PDF viewer 2026-10-13 14:12:12 +05:30
alam00000 3a5f146d1b fix(vercel): docs CSP 2026-10-03 14:17:55 +05:30
alam00000 1a41545fff fixed routing 2026-10-03 14:10:46 +05:30
alam00000 c10511203e added Vercel OSS Program badge 2026-10-01 00:24:47 +05:30
alam00000 4d1dc2a838 fix(vercel): update docs rewrite 2026-09-30 23:58:12 +05:30
alam00000 4874f1e8a7 chore(vercel): add Vercel deployment configuration 2026-09-30 23:49:58 +05:30
github-actions[bot] 2560a31cdd @Harrunos has signed the CLA in alam00000/bentopdf#895 2026-09-26 22:39:25 +00:00
nipunrajk 15c0435dde fix(markdown): prevent task lists with links from corrupting DOM
Disables label wrapping in markdown-it-task-lists plugin configuration.
When enabled, markdown-it-task-lists wraps task list content in <label>
tags, which malforms HTML structure when items contain links on the
same line and swallows subsequent DOM elements.

Fixes #715
2026-09-26 16:10:32 +05:30
alam00000 daae736907 fix(i18n): add Polish (pl) language support to routing and sitemap generation 2026-09-22 18:26:27 +05:30
github-actions[bot] 044b2eae99 @adrienboulle has signed the CLA in alam00000/bentopdf#887 2026-09-21 11:42:54 +00:00
Alam ea3f42db84 Merge pull request #869 from carminezac/fix/timestamp-default-cors-proxy
fix(timestamp): fall back to the default CORS proxy on official domains
2026-09-21 13:52:45 +05:30
Alam 72d20bba09 Merge pull request #880 from alam00000/chore/update-pdf-engine
build(deps): bump PDF engine and viewer to 813903c93c75
2026-09-17 15:17:21 +05:30
alam00000 5a7927572f feat: add fallback font loading and handling for various languages 2026-09-17 13:56:16 +05:30
alam00000 866d40edc8 build(deps): bump PDF engine and viewer to 813903c93c75 2026-09-17 04:40:44 +00:00
github-actions[bot] 9ae5c93886 @Ahson-Shaikh has signed the CLA in alam00000/bentopdf#870 2026-09-16 11:37:48 +00:00
Alam a44ad4d7d3 Merge pull request #761 from nine-dev9/polish-translation
Add Polish translation
2026-09-16 03:24:27 +05:30
Alam 4c4701ef37 Merge pull request #849 from pavel-miniutka/be-locale
fix(i18n): Belarusian translation fixes
2026-09-16 03:23:09 +05:30
Alam fe65e9e999 Merge pull request #859 from alam00000/dependabot/npm_and_yarn/fflate-0.8.3
build(deps): bump fflate from 0.8.2 to 0.8.3
2026-09-16 03:22:38 +05:30
Alam ff6a09ae72 Merge pull request #871 from Stephan-P/patch-1
Update common.json (Dutch)
2026-09-16 03:22:02 +05:30
Stephan Paternotte 81929c7f5e Update common.json (Dutch)
Home -> Startpagina (= Start Page)
2026-09-14 21:20:04 +02:00
github-actions[bot] 2d37ac9f77 @carminezac has signed the CLA in alam00000/bentopdf#869 2026-09-13 21:29:59 +00:00
Carmine Zacchia 3aefd7bb06 fix(timestamp): fall back to the default CORS proxy on official domains
The timestamp tool requires a CORS proxy: none of the built-in TSA endpoints send Access-Control-Allow-Origin, so the browser blocks the RFC 3161 POST. The runtime only used a proxy when VITE_CORS_PROXY_URL was set, and the official build never set it, leaving timestamping broken on www.bentopdf.com and on the published Docker images.

Fall back to the project-operated proxy on the official domains only (bentopdf.com, www.bentopdf.com), matching the origin already allowed in the generated CSP. Self-hosted instances keep requiring their own proxy.
2026-09-13 23:18:59 +02:00
alam00000 c5ec840d10 feat: add testimonial with real users 2026-09-14 02:37:46 +05:30
alam00000 597e36904e feat: add URL redirection rules 2026-09-10 13:43:15 +05:30