mirror of
https://github.com/go-vikunja/vikunja.git
synced 2026-07-20 21:01:02 -05:00
kolaente
d5ab54941f
Resolves a medium-severity XSS in Address6 HTML-emitting methods (GHSA / Dependabot alert #224). Vulnerable range: <=10.1.0, patched in 10.1.1. The package is pulled in transitively through socks -> socks-proxy-agent in the Electron build chain (devDependency only), but we add a pnpm override to ensure the patched version is used everywhere. The frontend workspace already has the equivalent override.
Vikunja desktop
The Vikunja frontend all repackaged as an electron app to run as a desktop app!
Dev
As this package does not contain any code, only a thin wrapper around electron, you will need to do this to get the actual frontend bundle and build the app:
First, build the frontend:
cd ../frontend
pnpm install
pnpm run build
Then, copy the frontend to this directory:
cd desktop
cp -r ../frontend/dist frontend/
sed -i 's/\/api\/v1//g' frontend/index.html # Make sure to trigger the "enter the Vikunja url" prompt
Then you can run the desktop app like this:
pnpm install
pnpm start
Building for release
- Run the snippet from above, but with a valid frontend version instead of
unstable - Change the version in
package.json(that's the one that will be used by electron-builder) pnpm installpnpm run dist --linux --windows
License
This project is licensed under the GPL-3.0-or-later license. See the LICENSE file for details.