:"info","filePath":"src/main.ts","lineNumber":20,"codeSnippet":"app.workspace.getActiveViewOfType","explanation":"Accesses Obsidian API: app.workspace","taintConfidence":null,"disclosed":false,"sourceUrl":"https://github.com/alangrainger/obsidian-air-quotes/blob/1.0.9/src/main.ts#L20"},{"id":711948,"pluginId":"air-quotes","version":"1.0.9","category":"permissions_scope","severity":"info","filePath":"src/main.ts","lineNumber":27,"codeSnippet":"app.metadataCache.getFileCache","explanation":"Accesses Obsidian API: app.metadataCache","taintConfidence":null,"disclosed":false,"sourceUrl":"https://github.com/alangrainger/obsidian-air-quotes/blob/1.0.9/src/main.ts#L27"},{"id":711949,"pluginId":"air-quotes","version":"1.0.9","category":"permissions_scope","severity":"info","filePath":"src/main.ts","lineNumber":86,"codeSnippet":"app.fileManager.processFrontMatter","explanation":"Accesses Obsidian API: app.fileManager","taintConfidence":null,"disclosed":false,"sourceUrl":"https://github.com/alangrainger/obsidian-air-quotes/blob/1.0.9/src/main.ts#L86"}],"factors":null,"networkEndpoints":[],"initialDiff":{"pluginId":"air-quotes","fromVersion":"1.0.8","toVersion":"1.0.9","files":[{"path":"src/Search.ts","hunks":"@@ -70,7 +70,7 @@ export class QuoteModal extends Modal {\n this.plugin = plugin\n this.index = 5 // The initial number of sentences to display for a quote\n // Split the incoming text into sentences\n- this.sentences = [...text.matchAll(/.+?[.?!\\n]['\"’”]?\\s+(?=[“‘\"']?[A-Z])/sg)].map(x => x[0])\n+ this.sentences = [...text.matchAll(/.+?[.?!\\n]['\"’”]?\\s+(?=[“‘\"']?\\p{Lu})/sgu)].map(x => x[0])\n }\n \n async onOpen () {\n","securityAnnotations":[]}],"securityDelta":{"newFindings":[],"resolvedFindings":[],"scoreChange":0}},"initialDiffFrom":"1.0.8","initialDiffTo":"1.0.9","summary":"The air-quotes plugin searches and inserts quotes from source text as you type, with all processing occurring within the vault. It accesses vault files and can overwrite existing files with the same name if a collision occurs. The plugin performs no network activity and contains no obfuscation.","dependencyVulnerabilities":[{"packageName":"ajv","packageVersion":"<6.14.0","severity":"moderate","title":"ajv has ReDoS when using `$data` option","advisoryUrl":"https://github.com/advisories/GHSA-2g4f-4pwh-qvx6","ghsaId":"GHSA-2g4f-4pwh-qvx6","cveId":null,"vulnerableRange":"<6.14.0","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=1.0.0 <=1.1.11","severity":"low","title":"brace-expansion Regular Expression Denial of Service vulnerability","advisoryUrl":"https://github.com/advisories/GHSA-v6h2-p8h4-qcjw","ghsaId":"GHSA-v6h2-p8h4-qcjw","cveId":null,"vulnerableRange":">=1.0.0 <=1.1.11","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.13","severity":"moderate","title":"brace-expansion: Zero-step sequence causes process hang and memory exhaustion","advisoryUrl":"https://github.com/advisories/GHSA-f886-m6hf-6m8v","ghsaId":"GHSA-f886-m6hf-6m8v","cveId":null,"vulnerableRange":"<1.1.13","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"esbuild","packageVersion":"<=0.24.2","severity":"moderate","title":"esbuild enables any website to send any requests to the development server and read the response","advisoryUrl":"https://github.com/advisories/GHSA-67mh-4wv8-2f99","ghsaId":"GHSA-67mh-4wv8-2f99","cveId":null,"vulnerableRange":"<=0.24.2","fixAvailable":"0.28.0","source":"npm-audit","isDirect":true,"path":null},{"packageName":"flatted","packageVersion":"<3.4.0","severity":"high","title":"flatted vulnerable to unbounded recursion DoS in parse() revive phase","advisoryUrl":"https://github.com/advisories/GHSA-25h7-pfq9-p65f","ghsaId":"GHSA-25h7-pfq9-p65f","cveId":null,"vulnerableRange":"<3.4.0","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"flatted","packageVersion":"<=3.4.1","severity":"high","title":

Air Quotes