From 4326ea68d944ddf7d82e9e3a85e08dab3fa58677 Mon Sep 17 00:00:00 2001 From: magdev Date: Sun, 1 Nov 2026 09:51:53 +0100 Subject: [PATCH] Release v0.1.2: the signing tool keeps no signature on the device MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit PDF.js's signature dialog saved every signature in the PDF origin's localStorage, "save" ticked on every open, so the next person on a shared device was offered the previous one's, a bau-pm logout included. The glue now wipes that store, refuses its writes, holds the save box off and hides it, and hides the dialog's Bild tab (#1, bau-pm BAU-260, PLAN.md ยง2.77 there). Gate, the same one CI runs, on this tree: shellcheck clean over scripts/; the image built with --pull, BentoPDF v2.8.8 verified at its pinned commit, 2776 pages tagged with a CSP carrying no host, nginx 1.31.8; the zero-hosts gate drove all 117 tool pages and nothing left the origin; the new signatures gate: 0 findings (9 on v0.1.0). bau-pm pins this as v0.28.1. Co-Authored-By: Claude Opus 5.5 --- CHANGELOG.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index 54bfe14..6bd9848 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -4,6 +4,10 @@ All notable changes to this project are documented in this file. The format is b ## [Unreleased] +## [0.1.2] - 2026-11-01 + +The signing tool keeps no signature on the device. PDF.js's signature dialog saved every signature in the browser, ticked by default, for the PDF tools address rather than for a bau-pm user, so the next person on a shared tablet or site office PC was offered the previous one's. Signing now means typing or drawing the signature each time, and the image tab is gone (issue #1, bau-pm BAU-260). + ### Security - The signing tool keeps no signature on the device (issue #1, bau-pm BAU-260). PDF.js's signature dialog saved every signature in the browser's `localStorage`, with *Unterschrift speichern* ticked by default, for this address rather than for a bau-pm user, so the next person on a shared tablet or site office PC was offered the previous one's signature, typed, drawn or traced from an uploaded image, and logging out of bau-pm did not clear it. Every page now deletes that store and refuses its writes, and the dialog's save box is held unticked and hidden. Signatures a device saved before are deleted on its first visit after the update.