על אודות הרחבה זו

Tabbi - Your Personalized New Tab

Transform your boring new tab page into a beautiful and functional dashboard with Tabbi! Get greeted personally, access your favorite sites instantly, jot down quick notes, and enjoy a stunning background every time you open a new tab.

Features:

Custom Backgrounds: Set your favorite background image using a URL or upload your own image file. Reset to the default scenic view anytime.
Personalized Greeting: See a warm "Good morning," "Good afternoon," or "Good evening" message along with the current date and time (choose between standard 24-hour or US AM/PM format).
Quick Search: A sleek search bar ready to search Google, Bing, DuckDuckGo, Wikipedia, Youtube or navigate directly to URLs, complete with search suggestions as you type.
Customizable Quick Links: Add, edit, and remove quick links to your most visited websites. Display them with recognizable icons (upload your own custom SVG icons!) and clear names.
Draggable Notes: Need to remember something quickly? Add multiple notes directly onto your new tab page and drag them wherever you like. They'll stay right where you left them!
Easy Settings: Manage your username, background preferences, quick links, notes, and time format through a clean settings panel.
Import & Export: Backup your personalized setup or transfer it to another computer easily using the import/export feature.

Make your browser feel truly yours with Tabbi – the simple, elegant, and customizable new tab page.

דירוג החוויה שלך

הערות שחרור עבור 2.0

Security Update

This update implements the following measures to enhance security and protect user data:

Cross-Site Scripting (XSS) Protection:
- Implemented the purify.js library for sanitizing HTML and especially SVG content (custom icons, imported data), preventing the execution of malicious scripts.
- Enhanced escaping of all user input (username, link names/URLs, notes, search queries, search suggestions) using the sanitizeText function to block interpretation as HTML.
- Prioritized the secure textContent method for inserting text into the DOM; innerHTML is used only after explicit sanitization.
- Improved validation and sanitization of data when importing settings from JSON files.
URL Security:
- Implemented the sanitizeUrl function for strict validation and cleaning of all URLs used in the application (quick links, background, search navigation), blocking unsafe protocols (e.g., javascript:, data: except for images) and incorrect formats.
- All external links opening in a new tab now use the rel="noopener noreferrer" attributes to protect against tabnabbing attacks and enhance privacy.
API Security and Data Handling:
- Interaction with search suggestion APIs (Google, Bing, DDG, Wikipedia) is performed over HTTPS. Requests and responses are sanitized.
- manifest.json uses Manifest V3, requesting only necessary permissions (storage) and access to specific hosts (host_permissions) for suggestion APIs.
- Data loaded from browser.storage.local and imported files undergoes validation for correct format and types before use.
User Confirmations:
- Added explicit confirmation (confirm()) before deleting quick links and notes to prevent accidental data loss.

UI Improvements

Improved notes interface.
Minor UI tweaks for settings and search suggestions.
Added animations when opening a new tab.
Fixed an issue where a large number of links on the new tab could push the interface off-screen.

בשימוש על־ידי