Sysreptor Versions Save

This is a security release. We recommend to not install previous versions.

• Update dependencies to fix request-smuggling vulnerabilities in gunicorn (CVE-2024-1135)

• Collaborative editing in notes
• Show cursor position and selection of other users for collaborative editing in notes
• Remember "Encrypt PDF" setting in browser's local storage
• Fix force change design API request not sent
• Add Content Security Policy directive form-action
• Strengthen Content Security Policy: remove script-src unsafe-inline
• Fix API token expiring today shown as expired in UI
• Fix squished buttons on publishing project page
• Markdown editor: Improve vue template variable handling
• Markdown editor: Allow escaping curly braces

• Fix PDF rendering hanging on headless chromium startup

• Allow configuring the PDF rendering timeout (applies only when a separate worker is used)
• Add filename in markdown editor for uploaded files
• Move cursor after uploaded file/image in markdown editor
• Prevent cutting off spellcheck error underlines in string fields
• Add more language variants for spellcheck
• Allow duplicating finding templates
• Fix error in periodic task for automatic project archiving

• Add component for cover pages in PDF designer layout editor
• Reference <figure> tag instead of <figcaption> in <ref /> component to jump to start of figure
• Enable multi-selection in markdown editor
• Fix CWE field formatting for PDF rendering
• Add HackTheBox CWEE design

• Add CWE field type
• Break text in tables to prevent tables overflowing page in base styles
• Sync updated field default values to preview data fields
• Automatically close brackets and enclose selected text with brackets in markdown editor
• UI: Add hint how to add custom tags
• UI: Add buttons for task list and footnote to markdown editor toolbar
• Fix text selection in markdown preview focus changed to editor
• Fix object field properties not always sorted
• Fix newline not inserted at empty last line of markdown editor in Firefox
• Fix ID form field loses focus while writing in report field page

• Define initial note structure for projects in designs
• Allow exporting and importing notes
• Include project name in default PDF filename on puglish project page
• Fix chapter number always prepended to title in <ref /> component
• Fix attributes not inherited to nested input fields
• Fix readonly code editor in PDF designer still writable

• Diff-view for version history
• Set form fields readonly instead of disabled
• Update build system of Vue PDF rendering script from webpack to vite
• Improve template field overview UI
• Fix error while editing ID of nested field of report section in designer
• Add demo data archives as TOML files to repository
• Fix resizing PDF viewer loses mouse focus in Firefox
• Add raptor mascot images as to empty pages
• Increase contrast of nested form fields
• Show more detailed error messages in frontend

• Fix PDF viewer crash in Chrome with Bitwarden browser extension

• Design and UI rework
• Dark mode
• Disable buttons and menu entries when user does not have permissions
• Fix save error for user fields
• Ensure custom fonts are loaded before rendering charts and diagrams
• Remove status emoji of notes
• Separate settings for spellcheck and markdown preview mode in projects, notes, templates, designs
• Click to enlarge images in markdown preview
• Consolidated project history
• Fallback to severity if CVSS is undefined in template list
• Add status and tags to designs