External Link Warning 2.0.0
Install opens the marketplace on your own Bulwark, through connector.bulwarkmail.org. Your server address stays in your browser.
Changelog
Added
- Admins can check links when they are clicked: with their own link check service (a small JSON contract, see the README), Google Safe Browsing, or both
- The dialog says what the check found, warns strongly about unsafe links, and points out link text that names another domain than the link goes to
- Admins choose what happens when a link can't be checked (let users continue, the default, or don't open it) and whether unsafe links can still be opened
- The dialogs come in all 30 languages Bulwark ships
Changed
- Needs Bulwark 1.20.0 or later
- Reads the admin settings without any secret fields, and needs no admin permission any more
- Keeps working when Bulwark's no-third-party mode is on; only Google Safe Browsing is off then
- German texts use the formal "Sie"
- Checks, shows and opens the address the browser really opens: a backslash before an @ or an international domain can't make it check another site than the one that opens
- The first click after the plugin starts stays within the 3-second budget, settings included, so the link isn't blocked as a popup
- Trusted domains match international domains in either form, and link text that is a file name ("report.pdf") isn't taken for a domain
Where it came from
Built by the directory from commit 611226fedf85 of github.com/bulwarkmail/plugins (folder external-link-warning), external-link-warning@2.0.0, submitted by workflow .github/workflows/publish.yml (run 41325097203).
- SHA-256
ba53b43a395e41cde4f9218a03cc0ce742acf1fe373ffe172f0bdfc9b0c281d8- Build
- npm run build in the directory's sandbox (node@sha256:0a7108bf6c7bf5de370ffb1a3ed6be93d405b43ff159f681a8d18c0e2bc2e402)
- Signature
- Signed by the directory, key
c7fa1217ac0826ce. Provenance document