* Add vault-crypto/mime utilities and remove heavyweight third-party imports
- Add AES-GCM vault-crypto utility with tests (replaces node-forge usage)
- Add common/mime.ts to replace mime-types package dependency
- Replace tough-cookie import in response-cookies-viewer with inline parser
- Replace @grpc/grpc-js status import in grpc-status-tag with inline constant
- Replace electron.ipcRenderer in auth.clear-vault-key with showToast()
- Remove unused analytics call from window-utils
* Expose env vars to renderer via contextBridge window.env
In the renderer process with nodeIntegration disabled, process.env is not
available. The preload script now explicitly whitelists the env vars the
renderer needs and exposes them as window.env via contextBridge.
constants.ts reads from window.env in the renderer and falls back to
process.env for the inso CLI and main process.
* Wire vault-crypto into callers; fix window.crypto for workers and Node
- key-value-editor and templating/utils now import encryptSecretValue/
decryptSecretValue from vault-crypto instead of vault, so the new
implementation is actually exercised
- Replace window.crypto with globalThis.crypto so vault-crypto works in
Web Workers (self.crypto) and Node.js/inso (globalThis.crypto)
* Move httpsnippet to main process via IPC
Removes the dynamic import of httpsnippet from the renderer so it is
no longer bundled there. Prepares for nodeIntegration: false, as
httpsnippet's core requires Node built-ins (querystring, url) that
won't be available in the renderer without nodeIntegration.
* Fix impure Date.now() key on CodeEditor; use setValue via ref instead
Replace key={Date.now()} with a useEffect that calls editorRef.current.setValue(snippet)
whenever snippet changes, keeping the editor mounted. Also apply prettier fixes from quick-check.
* Fix template tag prompt smoke race
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* fix e2e flake
* Remove toHaveScreenshot from PDF smoke test; fix CI timeout
The screenshot assertion inherited the full 25s expect timeout and caused
the 'can send requests' test to exceed its 60s CI budget. The three
structural assertions above it (toBeVisible, blob src, chrome-extension
frame poll) already provide sufficient smoke-level PDF coverage.
* fix: disable env editor Close button while save is in-flight
Prevents a race condition where the dialog closes and the test navigates
before the updateEnvironmentFetcher NeDB write completes. Playwright's
click() waits for aria-disabled to clear, so the test blocks until idle.
* fix: address Copilot review comments on PR #9992
- vault-crypto: replace forge-in-renderer with IPC bridge (main process
retains forge; renderer calls window.main.vault.{en,de}cryptSecretValue)
- mime.ts: expand lookup table to 48 entries (webp, wasm, mp4, docx, xlsx,
fonts, audio/video, etc.) and fix remaining mime-types import in send route
- response-viewer: move charset alias map to module level; normalise iconv-lite
alias names (utf8, latin1, win1252, …) to WHATWG labels for TextDecoder
- auth.clear-vault-key: fix typo "all you local" → "all your local"
* fix: sort imports in send route
* refactor: split script-security-rules out of script-security-policy
Extract pure data constants (blockedPropertyRules, blockedRootRules,
maskRules) and their interfaces (ASTRule, ThreatRule) into a new
script-security-rules.ts with no Node.js imports.
script-security-policy.ts now re-exports from that module and retains
only interceptorRules, which needs requireInterceptor. scripting-settings.tsx
imports directly from script-security-rules so the renderer does not
transitively pull in require-interceptor.
* feedback
* revert mime-type change, use alias
---------
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* test using a wrapper that sets security context before invoking the main application
* add build step to pr ci
* try with diff ver string
* statically link the standard libraries for portability
* more static linking
* prior version string
* remove pr substring from version
* try using a different version string
* ignore .node files
* add header count
* add status bar
* copy in full url
* placeholder and language
* validate url
* validate path
* fix possible dupe route bug
* clean up language
* layout
* fix submit
* error messages
* fix test
* feat(import): import multiple envs when importing OpenAPI3
When the OpenApi file to import contains multiple servers, import each one as an environment.
Closes#3627
* feat(import): import multiple envs when importing OpenAPI3
When the OpenApi file to import contains multiple servers, import each one as an environment.
Closes#3627
* fix lint and tests & rebase with latest develop
Co-authored-by: SIX Douglas <douglas.six@ext.adeo.com>
Co-authored-by: Filipe Freire <livrofubia@gmail.com>
* remove nunjucks usage from core themes
* adds package downloader script
* adds runtime validation for plugins still using nunjucks
* generateThemeCSS no longer needs to be async
* removes Nunjucks as valid type
* ⚡️ vite
* replace webpack with esbuild in build script
* move build sr to esbuild
* esbuild send-request shim
* remove main externals
* fix lint
* remove webpack from insomnia-testing
* removes more webpack stuff
TODO after this PR: make debugging work again
* pin swagger-ui-react to version before esm change
* restore prepare script to build in bootstrap
* use default tsconfig for eslint and apply fixes
* bundle insomnia-components as cjs/esm
* makes ca_certs.ts pass linting
* builds types for insomnia-components
* improve build script for production
* skip typechecking insomnia-components
* separate package from build
* add electron to externals
* add preload bundling and fix build output
* exclude grpc/proto-loader from the bundle
* move node packages to commonjs
* don't bundle grpc since it's a node module
* fix content security error
* use vite lib mode for insomnia-components
* tidy up vite config and tsconfig options
* update package-locks
* use process.env. for static build time variables
* fix vscode debugging
Co-authored-by: jackkav <jackkav@gmail.com>
Co-authored-by: Dimitri Mitropoulos <dimitrimitropoulos@gmail.com>
* VCS proof of concept underway!
* Stuff
* Some things
* Replace deprecated Electron makeSingleInstance
* Rename `window` variables so not to be confused with window object
* Don't unnecessarily update request when URL does not change
* Regenerate package-lock
* Fix tests + ESLint
* Publish
- insomnia-app@1.0.49
- insomnia-cookies@0.0.12
- insomnia-httpsnippet@1.16.18
- insomnia-importers@2.0.13
- insomnia-libcurl@0.0.23
- insomnia-prettify@0.1.7
- insomnia-url@0.1.6
- insomnia-xpath@1.0.9
- insomnia-plugin-base64@1.0.6
- insomnia-plugin-cookie-jar@1.0.8
- insomnia-plugin-core-themes@1.0.5
- insomnia-plugin-default-headers@1.1.9
- insomnia-plugin-file@1.0.7
- insomnia-plugin-hash@1.0.7
- insomnia-plugin-jsonpath@1.0.12
- insomnia-plugin-now@1.0.11
- insomnia-plugin-os@1.0.13
- insomnia-plugin-prompt@1.1.9
- insomnia-plugin-request@1.0.18
- insomnia-plugin-response@1.0.16
- insomnia-plugin-uuid@1.0.10
* Broken but w/e
* Some tweaks
* Big refactor. Create local snapshots and push done
* POC merging and a lot of improvements
* Lots of work done on initial UI/UX
* Fix old tests
* Atomic writes and size-based batches
* Update StageEntry definition once again to be better
* Factor out GraphQL query logic
* Merge algorithm, history modal, other minor things
* Fix test
* Merge, checkout, revert w/ user changes now work
* Force UI to refresh when switching branches changes active request
* Rough draft pull() and some cleanup
* E2EE stuff and some refactoring
* Add ability to share project with team and fixed tests
* VCS now created in root component and better remote project handling
* Remove unused definition
* Publish
- insomnia-account@0.0.2
- insomnia-app@1.1.1
- insomnia-cookies@0.0.14
- insomnia-httpsnippet@1.16.20
- insomnia-importers@2.0.15
- insomnia-libcurl@0.0.25
- insomnia-prettify@0.1.9
- insomnia-sync@0.0.2
- insomnia-url@0.1.8
- insomnia-xpath@1.0.11
- insomnia-plugin-base64@1.0.8
- insomnia-plugin-cookie-jar@1.0.10
- insomnia-plugin-core-themes@1.0.7
- insomnia-plugin-file@1.0.9
- insomnia-plugin-hash@1.0.9
- insomnia-plugin-jsonpath@1.0.14
- insomnia-plugin-now@1.0.13
- insomnia-plugin-os@1.0.15
- insomnia-plugin-prompt@1.1.11
- insomnia-plugin-request@1.0.20
- insomnia-plugin-response@1.0.18
- insomnia-plugin-uuid@1.0.12
* Move some deps around
* Fix Flow errors
* Update package.json
* Fix eslint errors
* Fix tests
* Update deps
* bootstrap insomnia-sync
* TRy fixing appveyor
* Try something else
* Bump lerna
* try powershell
* Try again
* Fix imports
* Fixed errors
* sync types refactor
* Show remote projects in workspace dropdown
* Improved pulling of non-local workspaces
* Loading indicators and some tweaks
* Clean up sync staging modal
* Some sync improvements:
- No longer store stage
- Upgrade Electron
- Sync UI/UX improvements
* Fix snyc tests
* Upgraded deps and hot loader tweaks (it's broken for some reason)
* Fix tests
* Branches dialog, network refactoring, some tweaks
* Fixed merging when other branch is empty
* A bunch of small fixes from real testing
* Fixed pull merge logic
* Fix tests
* Some bug fixes
* A few small tweaks
* Conflict resolution and other improvements
* Fix tests
* Add revert changes
* Deal with duplicate projects per workspace
* Some tweaks and accessibility improvements
* Tooltip accessibility
* Fix API endpoint
* Fix tests
* Remove jest dep from insomnia-importers
Checkout text files with LF line endings.
This prevents auto conversion from LF to CRLF on windows,
which would break unit tests expecting LF line endings.
* Payment modal done
* Refactor settings and added command support
* Made sync operations more efficient
* Sync button slightly more efficient
* Remove Elm
* Fixed Codemirror
* Nunjucks 3.0
* Revert sourcemap change and some renaming
* Some fixes for Config creation, and added name to resources
* Set to new Insomnia URL
* Some fixes
* Start on workspace dropdown and upgrade fontawesome
* WorkspaceDropdown start and Elm components!
* Lots of CSS shit
* Refactor some db stuff and move filter out of sidebar
* Adjust dropdown css
* Handle duplicate header names, and stuff
* Shitty cookies tab
* fixed cookie table a bit
* Modal refactor
* Starteed cookie modal design
* Better cookie storage and filter cookie modal
* Cookie editor round 1
* Fix kve cursor jumping and form encoding templating
* New cookies now show up in filter
* Checkpoint
* Stuff and fix environments css
* Added manage cookies button to cookie pane
* Fix accidental sidebar item drag on sidebar resize
* Environments modal is looking pretty good now
* Pretty much done environments nad cookies
* Some changes
* Fixed codemirror in modals
* Fixed some things
* Add basic proxy support
* Updated shortcuts
* Code snippet generation
* Some style
* bug fix
* Code export now gets cookies for correct domain
