External Link Warning

External Link Warning 2.0.0

Published Nov 1, 202637.1 KBNeeds Bulwark 1.20.0

Install opens the marketplace on your own Bulwark, through connector.bulwarkmail.org. Your server address stays in your browser.

Changelog

Added

  • Admins can check links when they are clicked: with their own link check service (a small JSON contract, see the README), Google Safe Browsing, or both
  • The dialog says what the check found, warns strongly about unsafe links, and points out link text that names another domain than the link goes to
  • Admins choose what happens when a link can't be checked (let users continue, the default, or don't open it) and whether unsafe links can still be opened
  • The dialogs come in all 30 languages Bulwark ships

Changed

  • Needs Bulwark 1.20.0 or later
  • Reads the admin settings without any secret fields, and needs no admin permission any more
  • Keeps working when Bulwark's no-third-party mode is on; only Google Safe Browsing is off then
  • German texts use the formal "Sie"
  • Checks, shows and opens the address the browser really opens: a backslash before an @ or an international domain can't make it check another site than the one that opens
  • The first click after the plugin starts stays within the 3-second budget, settings included, so the link isn't blocked as a popup
  • Trusted domains match international domains in either form, and link text that is a file name ("report.pdf") isn't taken for a domain

Where it came from

Built by the directory from commit 611226fedf85 of github.com/bulwarkmail/plugins (folder external-link-warning), external-link-warning@2.0.0, submitted by workflow .github/workflows/publish.yml (run 41325097203).

SHA-256
ba53b43a395e41cde4f9218a03cc0ce742acf1fe373ffe172f0bdfc9b0c281d8
Build
npm run build in the directory's sandbox (node@sha256:0a7108bf6c7bf5de370ffb1a3ed6be93d405b43ff159f681a8d18c0e2bc2e402)
Signature
Signed by the directory, key c7fa1217ac0826ce. Provenance document