lugin.js","hunks":"$21","securityAnnotations":[]},{"path":"src/core/settings.js","hunks":"@@ -39,6 +39,7 @@ export async function saveSettings(plugin) {\n plugin.loadedImages.clear();\n plugin.lastKeywords.clear();\n plugin.imageCache.clear();\n+ plugin.lastFrontmatter.clear();\n \n // Update all banners and field visibility\n plugin.app.workspace.iterateAllLeaves(leaf => {\n","securityAnnotations":[]},{"path":"tests/unit/core/domManager.test.js","hunks":"@@ -94,6 +94,7 @@ describe('domManager', () => {\n },\n observer: null,\n loadedImages: new Map(),\n+ lastFrontmatter: new Map(),\n debouncedEnsureBanner: vi.fn(),\n applyBannerWidth: vi.fn(),\n returnIconOverlay: vi.fn(),\n","securityAnnotations":[]},{"path":"tests/unit/core/eventHandler.test.js","hunks":"@@ -146,6 +146,7 @@ describe('eventHandler', () => {\n loadedImages: new Map(),\n lastKeywords: new Map(),\n imageCache: new Map(),\n+ lastFrontmatter: new Map(),\n bannerStateCache: new Map(),\n SHUFFLE_CACHE_AGE: 3600000,\n UPDATE_MODE: {\n","securityAnnotations":[]},{"path":"tests/unit/core/settings.simple.test.js","hunks":"$22","securityAnnotations":[]}],"securityDelta":{"newFindings":[],"resolvedFindings":[],"scoreChange":0}},"initialDiffFrom":"3.6.17","initialDiffTo":"3.6.18","summary":"The plugin scans your vault for image files to manage uniqueness and formats, then connects to multiple external image services (Pexels, Pixabay, Flickr, Unsplash, and AI generators) by validating API credentials and fetching available content. When uploading images, it sends your email address to external servers in the request headers. The plugin uses base64 decoding for internal data processing and validates API keys across multiple image services before enabling their features.","dependencyVulnerabilities":[{"packageName":"brace-expansion","packageVersion":">=2.0.0 <2.0.3","severity":"moderate","title":"brace-expansion: Zero-step sequence causes process hang and memory exhaustion","advisoryUrl":"https://github.com/advisories/GHSA-f886-m6hf-6m8v","ghsaId":"GHSA-f886-m6hf-6m8v","cveId":null,"vulnerableRange":">=2.0.0 <2.0.3","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=4.0.0 <5.0.5","severity":"moderate","title":"brace-expansion: Zero-step sequence causes process hang and memory exhaustion","advisoryUrl":"https://github.com/advisories/GHSA-f886-m6hf-6m8v","ghsaId":"GHSA-f886-m6hf-6m8v","cveId":null,"vulnerableRange":">=4.0.0 <5.0.5","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"flatted","packageVersion":"<=3.4.1","severity":"high","title":"Prototype Pollution via parse() in NodeJS flatted","advisoryUrl":"https://github.com/advisories/GHSA-rf6f-7fwh-wjgh","ghsaId":"GHSA-rf6f-7fwh-wjgh","cveId":null,"vulnerableRange":"<=3.4.1","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"happy-dom","packageVersion":"<20.8.9","severity":"high","title":"Happy DOM's fetch credentials include uses page-origin cookies instead of target-origin cookies","advisoryUrl":"https://github.com/advisories/GHSA-w4gp-fjgq-3q4g","ghsaId":"GHSA-w4gp-fjgq-3q4g","cveId":null,"vulnerableRange":"<20.8.9","fixAvailable":null,"source":"npm-audit","isDirect":true,"path":null},{"packageName":"happy-dom","packageVersion":">=15.10.0 <=20.8.7","severity":"high","title":"Happy DOM ECMAScriptModuleCompiler: unsanitized export names are interpolated as executable code","advisoryUrl":"https://github.com/advisories/GHSA-6q6h-j7hj-3r64","ghsaId":"GHSA-6q6h-j7hj-3r64","cveId":null,"vulnerableRange":">=15.10.0 <=20.8.7","fixAvailable":null,"source":"npm-audit","isDirect":true,"path":null},{"packageName":"picomatch","packageVersion":">=4.0.0 <4.0.4","severity":"moderate","title":"Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching","advisoryUrl":"https:

Pixel Banner