fpindado/sync-md-multi
1
0
Fork 0
Code Issues Pull requests Projects Releases 21 Packages Wiki Activity Actions
21 releases 25 tags
  • v0.3.0 d9b36a4af7

    v0.3.0 Stable

    fpindado released this 2026-07-27 16:05:02 +02:00 | 44 commits to main since this release

    Fix release addressing the review of the community-plugins listing PR (super-productivity#9323).

    Fixes

    • Config UI — HTML injection (XSS/RCE) fixed. Project titles and file paths shown in the config panel were being inserted via innerHTML. They are now built with textContent + addEventListener, so no dynamic value is ever parsed as markup. Added a UI regression test that feeds HTML-shaped names and asserts nothing executes.
    • Sync Now no longer overwrites a just-made Markdown edit. Sync Now now imports Markdown → SP first whenever the file changed since the last sync (so a fresh edit is never clobbered), then writes SP → Markdown back. If the file is unchanged, it writes back first as before. Regression test added.
    • Deleting a parent no longer removes a promoted child. When a parent task was removed from Markdown and its child un-indented to root, the parent's delete and the child's re-parenting were sent in the same batch, and SP's reducer cascaded the delete onto the child. Deletes now run in a separate batch, after the re-parenting update commits. Regression test models the cascading reducer.

    Notes

    • Also: on import, a task's note now ends at the first blank line (prose after a blank line is loose document content, not part of the note).
    • Verified on SP 18.13.1–18.15 (macOS). tsc clean, 336/336 tests.

    Install: Super Productivity → Settings → Plugins → Install Plugin from ZIP → sync-md-multi-v0.3.0.zip.

    Downloads