Martin BallandClaude Opus 5.5 02fffea7c9 #3736: HTML pictures load only from inside the automation read root ...

Finding 54. Opening an HTML file checks the file through its links, but
its pictures load relative to the folder the given path names. Through a
link outside the read root to a page inside it, pictures beside the link
(outside the root) were embedded. Each picture's canonical path is now
checked with check_read before it is read; unconfined opens are unchanged.

Test: tests::html_pictures_load_only_from_inside_the_read_root.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

2026-10-23 20:19:49 +01:00

..

control-key

File: recover unsaved work after a crash (#518) (#586)

2026-10-14 17:21:57 -04:00

doc

doc: preserve rotated free endpoints when rerouting connectors (#3882)

2026-10-23 13:14:15 -04:00

docbin

Fix .doc bookmark table desync on names longer than 40 characters (#3949)

2026-10-23 12:19:32 -04:00

docx

CI: one test binary per crate, nextest, line tables only (#4025)

2026-10-23 14:24:37 -04:00

engine

#3736: HTML pictures load only from inside the automation read root

2026-10-23 20:19:49 +01:00

fonts

Merge PR #2500: Resolve installed fonts by PostScript face name

2026-10-22 01:50:29 +00:00

formats

Drop U+FFFE and U+FFFF from ODT export text (#3817)

2026-10-23 10:31:21 -04:00

geom

Merge PR #1430: fix(geom): reject measurements that overflow to infinity in parse_measure (#1359)

2026-10-22 01:19:49 +00:00

layout

Selection bar: right margin for right-to-left text, and beside table rows (UI gap) (#2042)

2026-10-23 13:24:33 -04:00

mcp

#3735: automation writes check the directory entry they replace, not only the link's target

2026-10-23 20:19:49 +01:00

metafile

Merge PR #3247: #1899: a picture cropped to a sliver is drawn at the size the file gives

2026-10-22 01:22:55 +00:00

pdf

Print and PDF export use the Numeral setting (#3784) (#3824)

2026-10-23 12:17:45 -04:00

proof

Cap and deduplicate the .aff TRY alphabet at parse time (#3981)

2026-10-23 11:44:50 -04:00

render

Render: a dimmed header's borders keep one tone where they meet (#2946) (#3725)

2026-10-23 11:44:59 -04:00

ui-egui

CI: one test binary per crate, nextest, line tables only (#4025)

2026-10-23 14:24:37 -04:00

zotero

Integration: #1832 drop a useless .into() in the end-of-document citation test

2026-10-22 02:00:08 +00:00