Linus Rath abb249e5df Fix: gate preview "open in new tab" on inline-safe MIME types ...

The header open-in-new-tab button opened the blob: URL as a top-level
navigation for any preview that produced an objectUrl, including HTML and
SVG attachments. Blob URLs inherit our origin, so a script-bearing
attachment (text/html, image/svg+xml, ...) would execute in-origin when
opened that way - the exact case isMimeTypeSafeForInlinePreview() already
guards. Gate the button on that helper so it only appears for inert types
(images except SVG, audio, video, PDF, text/plain).

2026-05-31 15:58:53 +02:00

..

file-browser.tsx

feat: expose PWA, app identity, and extension directory keys in JSON config #312

2026-05-21 23:35:58 +02:00

file-preview-modal.tsx

Fix: gate preview "open in new tab" on inline-safe MIME types

2026-05-31 15:58:53 +02:00

file-upload-area.tsx

fix: resolve all 69 ESLint warnings across 40 files

2026-03-26 18:35:56 +01:00

files-settings-dialog.tsx

feat: add JMAP FileNode file storage backend and file settings

2026-03-16 01:05:59 +01:00

folder-tree-sidebar.tsx

feat: narrow-pane sidebars and cross-account file picker in Pro shell

2026-05-21 17:54:03 +02:00

image-preview-modal.tsx

feat: add resizable image component and rich text editor with image upload support

2026-03-21 20:45:23 +01:00

new-folder-dialog.tsx

feat: add WebDAV file browser with auth improvements

2026-03-15 05:24:27 +01:00

pdf-mobile-viewer.tsx

Feature: attachment preview - reliable MIME + inline PDF on desktop and mobile

2026-05-31 15:58:53 +02:00

rename-dialog.tsx

feat: add WebDAV file browser with auth improvements

2026-03-15 05:24:27 +01:00