Dylan M. Taylor d744379e60 fix(engine): refuse document URLs with shell syntax or a malformed authority ...

webbrowser on WSL hands an address to cmd.exe /c start, escaping only &
and ^, so a document link holding | (or < > " `) ran what followed it
with the viewer's authority; and an address its parser can't read is
reopened as a file path. Characters never valid in a URL unencoded are now
refused, and an http(s) authority must be made of host characters.

2026-11-03 15:46:13 +00:00

..

assets

M3: Delete on a layer inside an instance hides it instead of being refused (#1834)

2026-11-01 23:49:58 -05:00

automation

fix(engine): refuse document URLs with shell syntax or a malformed authority

2026-11-03 15:46:13 +00:00

boards

M12: a connector end on any part of an object with Cmd/Ctrl (#1733)

2026-10-31 10:27:56 +07:00

canvas

M2: a double-click on an auto layout edge sets Hug contents, with Alt Fill container (#1838) (#1867)

2026-11-02 05:31:00 -05:00

cmd

M7: Minimize collapses the navigation bar and both sidebars, the right one back while something is selected (#1835) (#1865)

2026-11-02 05:31:32 -05:00

content

M3: component properties keep their order on rename; Make slot asks for the name (#1536, #1537) (#1565)

2026-10-30 04:49:00 +07:00

dev

Give each variable a unique custom property in CSS export (#1738)

2026-10-31 10:37:26 -04:00

extensions

M11: widgets draw lines and SVG pictures (plugin API 6) (#1727)

2026-10-31 08:13:08 +07:00

fonts

M7: download a missing free font from the Missing fonts window (#754) (#1510)

2026-10-29 16:41:31 +07:00

selection

Merge main into #1421

2026-10-29 11:50:45 +07:00

session

M1: the colour picker's Image tab has a placeholder, a preview and takes a dropped file (#1682) (#1713)

2026-10-31 06:32:59 +07:00

sharing

M3: library analytics list how each style and variable is used (#1730)

2026-10-31 09:13:08 +07:00

a11y_keys_tests.rs

…

agent_presence_tests.rs

M8: show in the app where an attached AI agent is working (#1416) (#1556)

2026-10-30 02:03:27 +07:00

al_behaviour_tests.rs

M2: a child resized to the full available space of its auto layout frame becomes Fill container (#1859)

2026-11-02 05:31:11 -05:00

al_content_align_tests.rs

…

al_drag_tests.rs

…

al_keys_tests.rs

…

al_nesting_tests.rs

M2: Remove all auto layout takes it off a frame and every frame nested in it (#1833)

2026-11-01 23:49:53 -05:00

annotation_categories_tests.rs

…

annotations_tests.rs

…

arc_fields_tests.rs

…

arc_handles_tests.rs

…

assets.rs

…

auto_layout_move_tests.rs

M8: hover hit-tests once per pointer move, and a moved auto layout frame keeps its layout (#1571) (#1601)

2026-10-30 09:28:34 +07:00

automation.rs

…

autosave_tests.rs

…

batch_continue_events_tests.rs

…

batch_rollback_tests.rs

…

batch_step_ref_tests.rs

#1409: split a long batch test for the cognitive complexity lint

2026-10-29 11:40:21 +07:00

batch_undo_snapshot_tests.rs

M8: a batch keeps one undo snapshot, not one per step (#1099) (#1610)

2026-10-30 11:22:06 +07:00

binding_lists_tests.rs

…

board_connected_tests.rs

M12: a connector end on any part of an object with Cmd/Ctrl (#1733)

2026-10-31 10:27:56 +07:00

board_connector_tests.rs

M12: a connector end on any part of an object with Cmd/Ctrl (#1733)

2026-10-31 10:27:56 +07:00

board_grid_tests.rs

M12: board grid settings: dots, lines, graph paper or none

2026-10-29 14:44:18 +00:00

board_reshape_tests.rs

M12: a connector end on any part of an object with Cmd/Ctrl (#1733)

2026-10-31 10:27:56 +07:00

board_table_paste_tests.rs

M12: spreadsheet cells paste onto a board as a table (#1663)

2026-10-30 22:32:44 +07:00

board_tables_tests.rs

…

board_tests.rs

M12: a connector end on any part of an object with Cmd/Ctrl (#1733)

2026-10-31 10:27:56 +07:00

board_tools_tests.rs

M12: a connector end on any part of an object with Cmd/Ctrl (#1733)

2026-10-31 10:27:56 +07:00

boards.rs

M12: board grid settings: dots, lines, graph paper or none

2026-10-29 14:44:18 +00:00

boolean_cap_tests.rs

M8: cap the input of boolean operations (#1104) (#1581)

2026-10-30 06:03:35 +07:00

booleans_tests.rs

…

bound_alpha_tests.rs

…

branch_live_tests.rs

…

branch_tests.rs

…

branch_versions_tests.rs

…

brush_tests.rs

…

canvas_fixes_tests.rs

…

canvas.rs

…

catalog.rs

M1: Crop image from the Object menu, the right-click menu and the image fill row (#1464) (#1501)

2026-10-29 15:07:21 +07:00

cmd.rs

M8: the Actions palette offers only commands that run from it (#1574) (#1582)

2026-10-30 07:48:00 +07:00

code_connect_tests.rs

…

collab_ids_tests.rs

…

collab_live_tests.rs

…

collab_tests.rs

…

collab_undo_tests.rs

…

comment_agent_tests.rs

M8: an AI agent attached over MCP comments under its own name (#1414) (#1529)

2026-10-29 19:15:19 +07:00

comment_link_tests.rs

M9: share links can comment: a comment access level beside edit and view (#1525) (#1576)

2026-10-30 07:29:40 +07:00

comment_mentions_tests.rs

M9: Comments: mentioned names in comment.people, and mentions in comment.next and comment.prompt (#1591)

2026-10-29 22:00:50 -04:00

comments_polish_tests.rs

M9: Comments: mentioned names in comment.people, and mentions in comment.next and comment.prompt (#1591)

2026-10-29 22:00:50 -04:00

component_codegen_tests.rs

#669: explicit imports in flutter.rs, a capped layer's name stays on its comment line, the Flutter variant asserts in their own test, the Arabic catalog's key

2026-10-29 11:59:14 +07:00

component_cycle_tests.rs

M3: components that would contain themselves are refused, and loops in files are repaired (#1084) (#1540)

2026-10-29 21:05:32 +07:00

components_behaviour_tests.rs

M3: Delete on a layer inside an instance hides it instead of being refused (#1834)

2026-11-01 23:49:58 -05:00

components_scale_tests.rs

…

connector_anywhere_tests.rs

M12: a connector end on any part of an object with Cmd/Ctrl (#1733)

2026-10-31 10:27:56 +07:00

content.rs

…

convert_container_tests.rs

M2: preserve masks and sizing when adding auto layout to groups

2026-10-29 15:22:29 +01:00

cursor_tests.rs

…

dark_page_text_tests.rs

…

dash_cap_tests.rs

M4: Dash cap setting for Dash and Custom strokes (#1728)

2026-10-31 09:41:39 +07:00

datafill_tests.rs

…

derived.rs

M3: a collection of this file can be extended (#1679)

2026-10-31 02:21:53 +07:00

design_paste_tests.rs

…

dev_measurements_tests.rs

…

dev_resources_tests.rs

…

dev.rs

…

devcompare_tests.rs

…

devfocus_tests.rs

…

devinspect_tests.rs

M3: stored variable and collection references keep their identity (#1613)

2026-10-30 06:49:06 +03:00

devmode_behaviour_tests.rs

…

devmode_tail_tests.rs

…

doc_list_paths_tests.rs

M8: doc.list gives AI agents and plugins file names, not paths (#1117) (#1620)

2026-10-30 12:14:34 +07:00

doc_state.rs

M8: a drag that only moves the selection shifts what was worked out at its start (#1571) (#1640)

2026-10-30 16:13:55 +07:00

doc_urls_tests.rs

fix(engine): refuse document URLs with shell syntax or a malformed authority

2026-11-03 15:46:13 +00:00

double_click_tests.rs

M2: a double-click on an auto layout edge sets Hug contents, with Alt Fill container (#1838) (#1867)

2026-11-02 05:31:00 -05:00

draw_tools_tests.rs

…

duplicate_map_tests.rs

M8: edit.duplicate returns an id map with map: true (#995) (#1528)

2026-10-29 20:34:30 +07:00

duplicate_spacing_tests.rs

…

effects_tests.rs

…

error.rs

…

events_tests.rs

…

events.rs

…

export_behaviour_tests.rs

…

export_bench_tests.rs

…

export_depth_tests.rs

…

extended_chain_tests.rs

M3: a collection of this file can be extended (#1679)

2026-10-31 02:21:53 +07:00

extensions.rs

…

eyedropper_create_tests.rs

M4: the eyedropper with Cmd/Ctrl+Shift makes a colour style or variable (#1674)

2026-10-31 02:09:08 +07:00

facilitate_tests.rs

M12: board votes say who voted for what, and earlier votes' results are kept (#1666)

2026-10-31 01:19:03 +07:00

fig_export_assets_tests.rs

M3: stored variable and collection references keep their identity (#1613)

2026-10-30 06:49:06 +03:00

fig_export_tests.rs

…

fig_font_names_tests.rs

M4: an imported file finds an installed family under the other names its fonts give it (#1292) (#1628)

2026-10-30 15:44:09 +07:00

fig_import_tests.rs

…

fill_none_tests.rs

…

finite_geometry_tests.rs

M8: test the finite-geometry check by the layers it visits, not by time (#1672)

2026-10-31 01:46:30 +08:00

fonts.rs

M3: typed and stored variable, collection and mode ids find exactly that object (#1613) (#1635)

2026-10-30 18:00:34 +07:00

frame_guides_tests.rs

…

frame_label_tests.rs

…

frame_tests.rs

M1: the Frame tool's Phone presets have the iPhone 17 family (#1691) (#1720)

2026-10-31 06:13:47 +07:00

frames_behaviour_tests.rs

…

fx_behaviour_tests.rs

…

gesture_preview_tests.rs

…

gradient_shorthand_tests.rs

…

group_panic_tests.rs

#1609: a grouped panic keeps its payload and lets later live edits sync

2026-10-30 07:13:03 +03:00

guard.rs

M8: keep unsaved files when a panic stops the browser build (#1123) (#1580)

2026-10-30 06:36:33 +07:00

guide_snap_tests.rs

M1: address guide snapping review findings

2026-10-29 09:47:11 +03:00

hide_publishing_tests.rs

…

history_behaviour_tests.rs

…

html_codegen_tests.rs

…

huge_stroke_tests.rs

…

id_params_behaviour_tests.rs

…

image_crop_tests.rs

M1: the colour picker's Image tab has a placeholder, a preview and takes a dropped file (#1682) (#1713)

2026-10-31 06:32:59 +07:00

image_readable_tests.rs

M8: a damaged image is refused with a reason instead of showing as an empty box (#1724)

2026-10-31 07:22:44 +07:00

images_left_in_file_tests.rs

…

import_export_tests.rs

M8: every file a command reads by path is a regular file within a cap (#1114) (#1625)

2026-10-30 13:48:26 +07:00

import_journal_tests.rs

…

inspect_behaviour_tests.rs

…

inspect_fields_tests.rs

Merge main into #1420

2026-10-30 01:47:34 +03:00

instance_modes_tests.rs

…

instance_resizing_tests.rs

…

interaction_rollback_tests.rs

…

invite_links_tests.rs

…

jam_open_tests.rs

M6: FigJam .jam files open, as boards (#1342) (#1586)

2026-10-30 08:03:56 +07:00

keymap_tests.rs

Shortcuts: Cmd/Ctrl+Shift+Alt+= / - / 0 make the interface larger, smaller and default-sized (#1846)

2026-11-01 23:59:08 -05:00

keymap.rs

M7: Minimize collapses the navigation bar and both sidebars, the right one back while something is selected (#1835) (#1865)

2026-11-02 05:31:32 -05:00

lib.rs

M4: Alt+Enter while editing text opens the link at the caret (text.openLink) (#1860)

2026-11-02 05:31:21 -05:00

library_beacon_tests.rs

M8: confined library checks say they were refused (#1095)

2026-10-31 02:43:50 +08:00

library_path_tests.rs

…

library_range_styles_tests.rs

…

library_variables_tests.rs

M3: colour variables can be calculated from others, faded or mixed per mode (#1280)

2026-10-30 16:25:26 +08:00

line_endings_tests.rs

…

live_access_tests.rs

…

live_docs_tests.rs

…

live_peer_cap_tests.rs

M8: cap the people a client keeps track of and the deleted ids a session remembers (#1622)

2026-10-30 12:33:29 +07:00

live_share_tests.rs

M9: share links can comment: a comment access level beside edit and view (#1525) (#1576)

2026-10-30 07:29:40 +07:00

live_signal_tests.rs

…

live_tests.rs

…

mask_tests.rs

…

masks_behaviour_tests.rs

…

measure_tests.rs

…

measure.rs

…

menu_gaps_tests.rs

…

move_shortcut_tests.rs

M8: a drag moving many layers normalises only what sits around them, not each layer's bindings, sizing, text and instance checks (#1571) (#1656)

2026-10-30 20:53:03 +07:00

moved_by_tests.rs

M8: a drag that only moves the selection shifts what was worked out at its start (#1571) (#1640)

2026-10-30 16:13:55 +07:00

nested_override_tests.rs

…

node_find_tests.rs

M3: component properties keep their order on rename; Make slot asks for the name (#1536, #1537) (#1565)

2026-10-30 04:49:00 +07:00

node_set_refusals_tests.rs

…

normalize_guard_tests.rs

…

online_tests.rs

M9: share links can comment: a comment access level beside edit and view (#1525) (#1576)

2026-10-30 07:29:40 +07:00

open_issues_tests.rs

…

outline_options_tests.rs

…

page_clipboard_tests.rs

…

page_copy_navigation_tests.rs

…

page_target_tests.rs

…

paint_index_tests.rs

…

paint_reorder_tests.rs

…

paint_tests.rs

M3: colour variables can be calculated from others, faded or mixed per mode (#1280)

2026-10-30 16:25:26 +08:00

panels_behaviour_tests.rs

…

paste_missing_image_tests.rs

M6: a pasted image the clipboard doesn't carry shows as missing and is named (#1648)

2026-10-30 19:34:24 +07:00

path_read_caps_tests.rs

M8: every file a command reads by path is a regular file within a cap (#1114) (#1625)

2026-10-30 13:48:26 +07:00

pdf_print_tests.rs

…

pen_end_tests.rs

M1: Enter or a double-click with the pen edits the vector with the Move tool (#1430) (#1590)

2026-10-30 08:41:01 +07:00

pen_overlay_tests.rs

…

pen_vector_edit_tests.rs

M1: Enter or a double-click with the pen edits the vector with the Move tool (#1430) (#1590)

2026-10-30 08:41:01 +07:00

penpot_export_tests.rs

…

pixel_preview_tests.rs

…

placed_image_size_tests.rs

…

playground_tests.rs

…

plugin_data_tests.rs

…

plugin_directory_tests.rs

…

plugin_panels_tests.rs

…

plugins_tests.rs

…

prefs.rs

Shortcuts: Cmd/Ctrl+Shift+Alt+= / - / 0 make the interface larger, smaller and default-sized (#1846)

2026-11-01 23:59:08 -05:00

progressive_blur_tests.rs

…

prop_order_tests.rs

M3: component properties keep their order on rename; Make slot asks for the name (#1536, #1537) (#1565)

2026-10-30 04:49:00 +07:00

property_copy_tests.rs

…

proto_behaviour_tests.rs

…

proto_conditional_tests.rs

…

proto_delay_tests.rs

…

proto_multi_tests.rs

…

proto_overlay_anchor_tests.rs

…

proto_polish_tests.rs

…

proto_present_tests.rs

…

proto_responsive_tests.rs

…

proto_run_tests.rs

M3: typed and stored variable, collection and mode ids find exactly that object (#1613) (#1635)

2026-10-30 18:00:34 +07:00

proto_run.rs

M3: typed and stored variable, collection and mode ids find exactly that object (#1613) (#1635)

2026-10-30 18:00:34 +07:00

proto_tail_tests.rs

…

rest_slot_tests.rs

…

retained_walk_tests.rs

…

rotated_guides_tests.rs

…

rotated_select_tests.rs

…

rotation_origin_tests.rs

…

save_disk_changes_tests.rs

…

save_format_tests.rs

…

scale_tool_tests.rs

…

scaled_instance_tests.rs

…

section_contents_tests.rs

…

section_tests.rs

…

select_area_tests.rs

…

selection_behaviour_tests.rs

…

selection_depth_tests.rs

…

selection_reorder_tests.rs

…

selection_spacing_tests.rs

…

selection.rs

…

session.rs

M8: test the finite-geometry check by the layers it visits, not by time (#1672)

2026-10-31 01:46:30 +08:00

shape_handles_tests.rs

…

shapebuilder_strokes_tests.rs

…

shapebuilder_tests.rs

…

shapes_behaviour_tests.rs

…

sharing.rs

M9: Home ▸ Online shows the server's team list, and its files open by links without a secret (desktop and browser)

2026-10-30 17:10:12 +01:00

shortcut_parity_tests.rs

M7: Minimize collapses the navigation bar and both sidebars, the right one back while something is selected (#1835) (#1865)

2026-11-02 05:31:32 -05:00

sketch_import_tests.rs

…

slot_tests.rs

…

stored_ids_tests.rs

M3: typed and stored variable, collection and mode ids find exactly that object (#1613) (#1635)

2026-10-30 18:00:34 +07:00

stroke_style_tests.rs

…

style_tests.rs

…

style_vars_tests.rs

…

styles_behaviour_tests.rs

…

svg_import_tests.rs

…

tailwind_tests.rs

…

templates_tests.rs

…

tests.rs

Merge main into #1420

2026-10-29 13:04:22 +03:00

text_behaviour_tests.rs

M4: superscript and subscript are synthesised where the font has no glyphs for them (#1828) (#1868)

2026-11-02 05:30:50 -05:00

text_fill_tests.rs

…

text_link_tests.rs

M4: Alt+Enter while editing text opens the link at the caret (text.openLink) (#1860)

2026-11-02 05:31:21 -05:00

text_metrics_local_tests.rs

M6: .fig import keeps the file's saved line breaks while the text is unedited (#1236) (#1519)

2026-10-29 17:04:29 +07:00

text_motion_tests.rs

…

text_style_picker_tests.rs

…

text_tail_tests.rs

M4: Backspace or Delete at a list item's start keeps its indentation level (#1862)

2026-11-02 05:29:33 -05:00

textfit_tests.rs

…

theme_pages_tests.rs

…

tiff_tests.rs

…

transform_behaviour_tests.rs

…

unknown_params_tests.rs

M8: the Actions palette offers only commands that run from it (#1574) (#1582)

2026-10-30 07:48:00 +07:00

variable_props_tests.rs

Resolve stored variable ids by exact id, not by variable name

2026-10-29 14:11:48 +01:00

variable_tests.rs

…

variables_behaviour_tests.rs

M6: SwiftUI and Compose code name a bound variable by its code syntax (#1716)

2026-10-31 06:49:41 +07:00

variables_colour_tests.rs

M3: CSS export never names a calculation it leaves out either (#1280)

2026-10-30 16:59:19 +08:00

variables_editor_tests.rs

M3: stored variable and collection references keep their identity (#1613)

2026-10-30 06:49:06 +03:00

variables_import_shapes_tests.rs

…

variables_io_tests.rs

Give each variable a unique custom property in CSS export (#1738)

2026-10-31 10:37:26 -04:00

variants_discovery_tests.rs

…

vector_behaviour_tests.rs

Merge main into #1516

2026-10-29 23:58:44 +07:00

vector_drawable_export_tests.rs

…

vector_fill_rule_tests.rs

…

vector_multi_behaviour_tests.rs

…

vector_offset_tests.rs

…

vector_path_set_tests.rs

…

version_preview_tests.rs

…

version_tests.rs

…

view_behaviour_tests.rs

…

view_state.rs

M7: Minimize collapses the navigation bar and both sidebars, the right one back while something is selected (#1835) (#1865)

2026-11-02 05:31:32 -05:00

vote_history_tests.rs

M12: board votes say who voted for what, and earlier votes' results are kept (#1666)

2026-10-31 01:19:03 +07:00

vue_codegen_tests.rs

…

widget_hover_tests.rs

M6: plugin widgets have hover styles (gap 6) (#1634)

2026-10-30 17:33:04 +07:00

widget_input_tests.rs

…

widget_panel_tests.rs

M11: a widget opens its plugin's panel (plugin API 5) (#1684)

2026-10-31 03:24:32 +07:00

widget_shapes_tests.rs

M11: widgets draw lines and SVG pictures (plugin API 6) (#1727)

2026-10-31 08:13:08 +07:00

widgets_tests.rs

M11: a widget opens its plugin's panel (plugin API 5) (#1684)

2026-10-31 03:24:32 +07:00