Tabox is a browser extension for Chrome and Chromium based browsers. It lets you save all your open tabs and groups into a collection that you can later click to reopen.
When a new version of Tabox is available and is installed for the user, backup all current collections and provide a way to restore those collections from the settings menu.
This is in case something happens to the collections after updating the version - the user can undo that.
Add an option to sort collection alphabetically (by name).
Also, switch to a drop down select box to select how to sort the collection instead of buttons.
While checking the plugin I stumbled upon an html page /deferedLoading.html which was accepting ?url param to redirect user to the supplied url provided in that parameter. Simply changing url to javascript:alert(1) payload results in javascript code being executed. Thus, by looking at the source code of deferedLoading.js It was found that there was no sanitization or restriction in place to protect against this vulnerability.
Reflected Cross-Site Scripting (XSS) is a type of injection attack where malicious JavaScript code is injected into a website. When a user visits the affected web page, the JavaScript code executes. Dom Based XSS can be found on this plugin which allows an attacker to create a crafted URL. When opened by a user, this URL will execute arbitrary Javascript within that user’s browser in the context of the plugin.
When an attacker can control code that is executed within a user’s browser, they are able to carry out any actions that the user is able to perform, including accessing any of the user's data and modifying information within the user’s permissions. This can result in modification, deletion, or theft of data, including accessing or deleting files, or stealing session cookies which an attacker could use to hijack a user’s session.
up until this week around 20/07/2023 opening collections was working alright but today when i tried it didnt open the tabs in private browsing but it works in normal browsing for edge another condition is if the normal browsing is open and i try using the private in meantime it works fine too
Microsoft Edge
Version 115.0.1901.183 (Official build) (64-bit)
Some users have reported an issue that after importing a collection from file, that collection is either not added or added but is not clickable.
Possibly related to Sentry issue ID: TABOX-5
If a collection is set to auto-update, then the collection needs to have been opened from Tabox itself. in the current state, if the browser crashes and the tabs are restored, Tabox fails to recollect that the current window was being tracked and auto-updated as part of a collection.
Expected Behaviour
Say, in the instance that the browser crashes, it would be great if Tabox could identify that the current window was previously being auto-updated as a collection and resumes the collection auto-updating.
Tabox has been a lifesaver and I've been using it for months now. Recently, I noticed that it doesn't save tab groups anymore and if I update an older collection with saved tab groups, those groups are getting lost. Has there been a change with recent versions and do I need to update some settings to start saving groups again?
first things first: thanks for offering and maintaining this great extension!
I ma a new user and got a bit puzzled by the "Expand list of Tab" icon, which shows the current state, not the action which is taken when you press it.
By 35 years of GUI using, I expect an action element to show what's happening when I press it and a label to show the current state. The state is obvious here (closed or open), and I every time stumble a bit, why it's the other way round.
No big deal, but breaking well known usability flows.
Thanks,
Andreas
I'm a huge right-click open in the background person. and I think many of us are since hoarding tabs consumes memory and processing power. so I was thinking a better way to do this make a tab playlist. whenever a user hits right-click open in the background your extension doesn't open the link it just adds that link into a list and that list will work as a playlist. just like a Youtube Playlist or Queue list does. Users can make multiple playlists like different groups. let's say you made one single playlist now you want to open not only one tab but 3 to 4 tabs together from a single playlist that will work as one group, not like multiple playlists! when you close one tab different tab pops up from the playlists to get the work done. make it a user-specific choice what kind of functionality they want. do they want an automatic behavior like an autoplay function or no autoplay like only users can choose what tabs need to come up front!
See if you can make this possible I have more features in mind!
Current behavior is that opening a single tab will create a new window.
This will change the behavior so the tab will be added to current window or open in a new window, based on the "new window" switch used for opening collections.
First thanks for the ext, works great. I may be missing something so I wonder if there is a way of avoiding pinned tabs to get saved? I had to manually edit the list to have only non pinned tabs in the group.
If this feature is not implemented, then consider this as a request, I'm sure that a bunch of people will appreciate this.
Once a user clicks the "update" button or does any operation that changes the collections, provide a way to undo that operation via a snackbar undo button.
If a collection consists of a tab group as the first entity in the window (i.e the collection starts with a tab group and not a tab) then opening this collection results in one of the tabs from the group to pop out.
recently when i am using tabox and opening a collection of tabs for animeplanet.com some of them turn into blank pages even though they got a url and were loading but suddenly they turn into blank page Note this issue started about 20 days ago or something close to that i have been using this extension for a year or so
Google sync works great, and for the majority of users google sync is all they need.
However, using google for some carries privacy concerns or some just dont like google for other reasons.
I propose some advanced options to use other cloud providers for sync and backup.
Examples:
Brave sync: using the sync built in to the brave browser
VPS/self hosting
yandex
backblaze b2
local folder sync (folder can be automatically picked up by onedrive, backblaze, or other cloud sync apps)
mega
more that i probably am missing
hopefully others can chime in with ideas
Hello, I wanted to let you know that I love Tabox and I use it all the time!
I recently started using Tabox v3.5.4 and noticed an issue when trying to open my collections in a new or current window. When I try to open a collection, the tabs won't open in their colored TabGroups, but rather as individual tabs only. I was able to recreate the issue on another machine with a fresh install of Tabox v3.5.4 as well. I tested this on Chrome v100.0.4896.127 on MacOS. I've also added a video to show the issue first hand.
Note: This only seems to happen to larger groups of tabs, E.g. a collection of 72 tabs in 10 groups does not work properly, but a collection of 23 tabs in 5 groups does work properly.
A toggle in the settings that enabled a counter for the number of tabs open to be displayed on the extension button.
An additional flair to this will be having the counter take on a colour gradient (white -> red indicating low -> high) according to the system load from the number of tabs open.
This feature is found in a competing session manager extension Session Buddy, and I thought it would be nice to have the feature on Tabox too, and hopefully easy to implement.
Currently, when using the "open-collection-1" keyboard shortcut command (default ctrl+shift+1), it opens the tab collection in a new window rather than the current widow (the issue occurs with using the other open-collection command keyboard shortcuts as well). Would it be possible to update this to open these tab collections in the same window when using the keyboard commands?
I feel like the issue might be located in lines 232-240, but I'm not too familiar with js nor chrome apps (or anything else for that matter) and I'm taking a guess tbh.
When right clicking anywhere eon the page, allow the user to add the tab to a collection in Tabox.
Also, if a given collection holds tab groups, allow adding the tab directly inside a group.
The built in Defer option seems to be causing problems for some people.
Instead, we need a new 'lazy loading' option, where all tabs open an internal html page that redirects to the relevant url on focus.
First of all thank you for your work,
can the extention be opened in a new tab or window for better managment and organizing
for example clusterwm
also moving tabs or groups between sessions
SessionBuddy is able to save ALL current windows you have open. The biggest issue with SessionBuddy for me was the lack of support for tab groups, which brought me to this extension. It'd be fantastic if I could save all open windows at one and have my tabs separated by windows, with sections within those windows for the tab groups
Hello, very good extension so far, but I recently opened the extension and all my saved sessions are gone (they were many and important), I went to the load collection from google backup option and it didn't work either, what can I do? Is there any backup in the extension directory? how to restore it, any help? thank you
Before starting to support multi window collections, we need to start with just capturing the current window's metadata when saving collections.
This will allow adding support for saving window sizes and positions.
I've tried logging in several times via Google, but nothing happens when I hit log in. I've tried several times on a few different days and it didn't work properly.
sorry for the brief post, I'm in class and gotta get to work haha
Once I login with my account (I give all possible permissions) the first second it says success and I can see I'm logged and the next second I got error and I'm logged out. I can't sync my data or log in. I used "Restore collection from version 3.4.9" and I get my saved bookmarks but if I close the extension window they disappear again. I'm not sure after which version the problem occurred because I haven't used it in a while.
While the Auto-Updating Collections setting is turned on, if the feature loses the window ID hook for the current collection and stops tracking the collection (say, in a situation where the browser crashed and the window was restored), there is no manual way to resume tracking and updating the collection for the currently open window. The only current way is to close the current window and open the window again through the Tabox collection.
Possible Solution
I presume this can be added through the manual update button which would be present on the collection that is no longer being actively updated. Clicking this button should hook the current window ID back to the collection and resume auto-updation.
To summarise, if the current window has already been saved as a collection, but the auto-tracking hook for the current window has been lost, then the update button on the collection can be used to re-hook the current window ID back to the collection to resume tracking.
Any tab with file:/// URL breaks Tabox Open collection function.
It skips those file:/// tabs (or cannot open them if (Discard tabs on open(Enabled))
Often this leads to groups being wholly or partially absent from the collection.
Generally http:// tabs will be present, but may be ungrouped.
Behaviour is not consistent; seems to truncate processing of collection on opening, particularly groups.
Sometimes sync is not perfect. There could be a case where the data in Google Drive does not match what Tabox has locally (for example, if opening Tabox after clearing Local Storage).
This issue is for adding an option to the settings menu to allow a user to request the data from Google Drive be loaded into Tabox forcefully.
Version 3.5.9 saves the last 5 auto-saved sessions. In the past I sometimes mistakenly opened two windows of Chrome. On of them contained 100+ tabs and the other ~10 tabs. When closing Chrome I mistakenly closed the 100+ tabs first so when Chrome was subsequently reopened it only restored the window containing the 10 tabs.
I am afraid that with 5 auto-saved sessions I might not notice my mistake until the backup I am interested in gets wiped out.
Ideally, I would like to maintain ~7 days worth of sessions, regardless of the count.