v0.6.25

Bug fixes

• Fixed KeeWeb not loading in iframe: added allowIframes: true to the config endpoint. KeeWeb 1.18.x disables iframe embedding by default; the Nextcloud plugin embeds it in an iframe, so this setting is required.
• Fixed PHP syntax errors in keeweb.php: bare <? sequences in bundled JavaScript (XML processing instructions, regex patterns) were being interpreted as PHP opening tags, causing HTTP 500 on load.

Notes

v0.6.24 should be considered broken — upgrade directly to v0.6.25.

Compatible with Nextcloud 33–34.

v0.6.24

Changes

Updated KeeWeb bundle to v1.18.10

• KDBX 4.1 spec compliance: LastModificationTime in CustomData and CustomIcons is now written as Base64 binary as required by the KDBX 4+ spec, instead of ISO-8601 strings. KeePassXC current versions accept both formats, but the output is now spec-compliant. See keeweb/kdbxweb#49 and fix PR keeweb/kdbxweb#62.
• DOMPurify 2 → 3: resolves XSS CVEs in the markdown HTML sanitizer.

Installation

Compatible with Nextcloud 33–34.

v0.6.23

Nextcloud 33/34 compatibility release.

See CHANGELOG.md for details.