Commit Graph

2734 Commits

Author SHA1 Message Date
Alexandr Stelnykovych
774a83dc33 Bump version 2.0.17 2025-05-28 13:20:05 +03:00
Alexandr Stelnykovych
e9a54ee876 Merge pull request #1901 from safing/merge/master-into-v2-with-history
Merge master into v2.0 (with history)
2025-05-28 12:38:11 +03:00
Alexandr Stelnykovych
9d345f1941 go mod tidy 2025-05-28 11:53:38 +03:00
Alexandr Stelnykovych
ec2d4ca9eb Merge branch 'master' into merge/master-into-v2-with-history (v1 into v2)
# Conflicts:
#	Earthfile
#	base/config/main.go
#	base/database/dbmodule/db.go
#	base/database/main.go
#	go.mod
#	go.sum
#	service/core/base/global.go
2025-05-28 11:52:15 +03:00
Natanael Rodriguez Ramos
25c1504771 Updated spn-hub install script to remove portmaster-start dependency. 2025-05-24 17:57:02 +01:00
Natanael Rodriguez Ramos
2444209834 Updated spn-hub to remove teh portmaster-start dependency. 2025-05-24 17:40:15 +01:00
Alexandr Stelnykovych
d3f6cb1504 Bump version 2.0.16 2025-05-22 15:49:58 +03:00
Alexandr Stelnykovych
7802c40ef0 Merge pull request #1893 from safing/fix/restrict_ui_process_connections
Fix/restrict UI process connections
2025-05-22 15:42:14 +03:00
Alexandr Stelnykovych
531d147936 Improve logging message format 2025-05-22 15:40:06 +03:00
Alexandr Stelnykovych
fbc93cc09f Add more descriptive comments + minor improvements 2025-05-22 15:30:05 +03:00
Alexandr Stelnykovych
3b91aa06ba Enhance default connection settings for Portmaster UI profile to block all connections, ensuring only necessary connections to Portmaster Core are allowed. 2025-05-21 18:12:50 +03:00
Alexandr Stelnykovych
11c4ae39d2 (Windows) Fix false-positive detection of Portmaster UI processes
Problem:
  System browsers launched from the Portmaster UI (e.g., when a user clicks a link) may be incorrectly detected as Portmaster UI child processes.

Solution:
  The Tauri UI app now sets the PORTMASTER_UI_WEBVIEW_PROCESS environment variable for all child WebView processes. Portmaster-core uses this variable to accurately determine if a process is truly related to the Portmaster UI.
2025-05-21 18:08:04 +03:00
Alexandr Stelnykovych
3e034fc33b (Windows) Use contrast icon for installer and UI app binary 2025-05-21 14:48:59 +03:00
Alexandr Stelnykovych
58ca3150e7 Log a warning in the UI when falling back to default connection parameters 2025-05-20 12:56:24 +03:00
Natanael Rodriguez Ramos
ec749b6be7 Merge branch 'v2.0' into task/refactor-spn 2025-05-18 20:59:38 +01:00
Alexandr Stelnykovych
8035c3d5ac Bump version 2.0.14 2025-05-16 20:13:19 +03:00
Alexandr Stelnykovych
61e85eb85d Revert "[desktop] UI: Restrict CSP to 127.0.0.1:817"
This reverts commit 7407545b6e.
2025-05-16 20:09:13 +03:00
Alexandr Stelnykovych
b62178eecb Merge pull request #1886 from safing/fix/v2_force-UI-use-ipv4-api
Fix/v2 force UI use ipv4 api
2025-05-16 19:18:12 +03:00
Alexandr Stelnykovych
2aae091bfd Merge pull request #1885 from safing/fix/v2_profile_icon
Fix: v2 app profile icon retrieve
2025-05-16 19:17:14 +03:00
Alexandr Stelnykovych
7407545b6e [desktop] UI: Restrict CSP to 127.0.0.1:817 2025-05-16 19:10:17 +03:00
Alexandr Stelnykovych
5bc1e779b2 fix: force UI to use IPv4 (127.0.0.1) for API endpoints
Previously, the API endpoint was defined using `localhost`, which could resolve to the IPv6 address `::1`.
This caused issues because the Portmaster core service is listening on `127.0.0.1:817` and only fast-tracking connections to that specific IPv4 address.
2025-05-16 10:56:30 +03:00
Alexandr Stelnykovych
cacf6c552a fix: (Windows) Replace ICO decoder for improved icon extraction
Implemented direct use of `sergeymakinen/go-ico` decoder instead of `mat/besticon/ico`
for icon conversion. The standard `image.Decode()` and  `mat/besticon/ico` approaches
failed with certain ICO files, particularly those containing cursor data
from Windows executable resources. This change ensures more reliable
handling of various ICO format variants.
2025-05-14 17:49:24 +03:00
Alexandr Stelnykovych
84a8f755fe Remove temporary replacement for winres package dependency 2025-05-14 17:28:33 +03:00
Alexandr Stelnykovych
8f23846d1c fix: Save and apply profile icon if it hasn't been applied yet
Icon saving was not working in situations where profile.Name had not changed.
2025-05-13 18:13:32 +03:00
Alexandr Stelnykovych
b2e47e40ff Merge pull request #1882 from safing/fix/s25-fix-deadlock-and-connectivity-loss
fix: Deadlock in TCP resolver
2025-05-07 17:36:37 +03:00
Alexandr Stelnykovych
6c98755c77 fix: Deadlock in TCP resolver 2025-05-07 17:33:55 +03:00
Daniel Hååvi
03da033cd2 Only use stale dns cache entries when the query result was successful
(cherry picked from commit f233a56eea)
2025-05-07 17:30:36 +03:00
Alexandr Stelnykovych
4a3faa200d Merge pull request #1879 from safing/dhaavi-patch-1
Only use stale dns cache entries when the query result was successful
2025-05-07 17:22:20 +03:00
Alexandr Stelnykovych
c6f47967b1 Bump UI version 2025-05-06 11:34:10 +03:00
Alexandr Stelnykovych
ab3981ba60 [desktop] UI fix: integrate NgZone into Tauri WebSocket connection for better change detection 2025-05-05 18:11:36 +03:00
Daniel Hååvi
f233a56eea Only use stale dns cache entries when the query result was successful 2025-05-05 15:05:48 +02:00
Alexandr Stelnykovych
eaa70b7a73 Bump UI version 2025-04-30 14:13:11 +03:00
Alexandr Stelnykovych
93e4449b00 (Windows) fix: UI restart – do not send "shutdown" event during restart 2025-04-30 12:33:18 +03:00
Alexandr Stelnykovych
27cdfd696d [desktop] fix: Bug in the asyncInvoke() function — sometimes it never receives a response.
This fixes the ticket s26: "[bug] UI: Sometimes the UI remains stuck in the "Connecting to System Service" state indefinitely. "
2025-04-28 16:57:32 +03:00
Alexandr Stelnykovych
deee68d5d3 [packaging] fix: duplicate 'assets' in release files 2025-04-28 11:38:07 +03:00
Alexandr Stelnykovych
54f07e15d9 Bump UI version 2025-04-28 11:36:29 +03:00
Alexandr Stelnykovych
beb06ed764 Merge pull request #1871 from safing/feature/ui-security
[desktop] Portmaster UI process detection (including child processes)
2025-04-28 11:09:01 +03:00
Alexandr Stelnykovych
d3e489f10a Merge branch 'v2.0' into feature/ui-security 2025-04-28 11:08:25 +03:00
Alexandr Stelnykovych
37d32c7038 Merge pull request #1873 from safing/fix/s10-linux_upgrade_fix
Fix/s10 linux upgrade fix
2025-04-28 11:05:55 +03:00
Alexandr Stelnykovych
f81f5c7566 [desktop] Fix: --background command-line argument for UI 2025-04-25 17:12:03 +03:00
Alexandr Stelnykovych
8a0c34826d [packaging] (Windows installer) Add registry entry for autostart and cleanup on uninstall 2025-04-25 12:27:21 +03:00
Natanael Rodriguez Ramos
1ed4cba1e1 SPN: Set SPN binary path 2025-04-24 17:54:19 +01:00
Alexandr Stelnykovych
e21acae888 [desktop] API requests from the UI are now sent from the app binary instead of the WebView.
This makes it easier to identify the API request initiator, which is important for authenticating the UI process.

Note: Requests that do not require authentication (e.g., images, fonts, styles) may still be made from the WebView.

Merge branch 'feature/ui-connections-trough-tauri-bin' into feature/ui-security

# Conflicts:
#	desktop/angular/package-lock.json
#	desktop/angular/package.json
#	desktop/tauri/src-tauri/Cargo.lock
#	desktop/tauri/src-tauri/Cargo.toml
#	desktop/tauri/src-tauri/gen/schemas/acl-manifests.json
#	desktop/tauri/src-tauri/gen/schemas/desktop-schema.json
#	desktop/tauri/src-tauri/gen/schemas/windows-schema.json
2025-04-24 15:02:05 +03:00
Alexandr Stelnykovych
dce08b8af8 Revert "[desktop] Custom pipe for '<img>' 'src' to bypass WebView image downloads"
This reverts commit d11bc077cf.
2025-04-24 14:36:10 +03:00
Alexandr Stelnykovych
0cb17a16bb Revert "[desktop] Force <img> elements to use Angular HttpClient for image downloads (bypassing WebView)"
This reverts commit 76289610ee.
2025-04-24 14:36:00 +03:00
Alexandr Stelnykovych
0f74763fb8 Removed Tauri-generated files from repository 2025-04-24 14:19:54 +03:00
Alexandr Stelnykovych
f1b6d85e54 [desktop] Removed "tauri-apps/plugin-http" from UI project dependencies 2025-04-24 14:17:26 +03:00
Alexandr Stelnykovych
5053ef1a23 [desktop] Use custom Tauri command for HTTP requests instead of http-client plugin
Replaced the http-client plugin, as it does not support keep-alive connections.
Each request opened a new TCP connection to the service, which was inefficient.

The new custom `send_tauri_http_request` command, exposed to the UI, uses an application-wide `reqwest::Client`, which supports idle (persistent) connections.
2025-04-24 14:00:15 +03:00
Alexandr Stelnykovych
a42f0a6084 [desktop] Tauri HTTP interceptor: respect request data type 2025-04-23 16:26:16 +03:00
Alexandr Stelnykovych
41f860bb9c [github workflow] Temporarily disabled building installers 2025-04-23 14:17:04 +03:00