novalagung / muslimboard

🕌 Muslim Board Browser Extension

Muslim Board

Personal Dashboard for Muslims anywhere in the world, available on many languages.

Supported languages

• English language
• Bahasa Indonesia
• Russian
• Arabic
• Traditional Chinese
• Simplified Chinese
• Hindi
• Bengali

Preview

Installation via Official Page

• MacOS Safari via App Store
• Google Chrome & Opera Browser via official Chrome Web Store
• Microsoft Edge via official Edge Add-ons Marketplace
• Mozilla Firefox via official Firefox Add-ons Marketplace

Local Installation

Use chrome → open up extension menu → click Load unpacked and navigate to the extension directory. Other browser has similar way to load unpacked extensions.

Project Structure

• Folder extension is where the chrome extension source code lies.
• Folder macos is the MacOS safari extension project directory. It is used for maintaining AppStore submission.
• Folder resources contains a few resource files (it's used by the extension or website directly).
• Folder webservices contains the backend webservice API code.
• Folder website contains the source code web/landing page, https://muslimboard.novalagung.com.

Lisensi dan Status FOSSA

Muslim Board gratis untuk disebarluaskan secara bebas dibawah lisensi MIT License.

Hall of Fame Contributor

• A B M Noushad Bhuiyan (adding Hindi & Bengali localizations)
• Eky Pradhana
• Elena Dobrolyubova (adding Russian localization)
• Ferdina Kusumah
• Moch. Sudharmono (adding Hijri calendar)
• Mohammed Ayman (adding Arabic localization)
• Muhammad Ichsanul Fadhil
• Rahadian Ardya (adding remaining time info)
• Rochmad Nurul Fahmi
• Rosdyana Kusuma (adding Traditional Chinese localization)
• 王艺凯 (adding Simplified Chinese localization)

Author

Noval Agung Prayogo

muslimboard's Issues

Add Hijr Calendar

Please add Hijr calendar

Fix code scanning alert - Unsafe jQuery plugin

Tracking issue for:

• https://github.com/novalagung/muslimboard/security/code-scanning/3

---

Issue location

muslimboard/website/res/assets/base/util.js

Line 99 in 6d68754

config.target = $(config.target);

Potential XSS vulnerability in the '$.fn.panel' plugin

Library plugins, such as those for the jQuery library, are often configurable through options provided by the clients of the plugin. Clients, however, do not know the implementation details of the plugin, so it is important to document the capabilities of each option. The documentation for the plugin options that the client is responsible for sanitizing is of particular importance. Otherwise, the plugin may write user input (for example, a URL query parameter) to a web page without properly sanitizing it first, which allows for a cross-site scripting vulnerability in the client application through dynamic HTML construction.

Recommendation

Document all options that can lead to cross-site scripting attacks, and guard against unsafe inputs where dynamic HTML construction is not intended.

Example

The following example shows a jQuery plugin that selects a DOM element, and copies its text content to another DOM element. The selection is performed by using the plugin option sourceSelector as a CSS selector.

jQuery.fn.copyText = function(options) {
	// BAD may evaluate `options.sourceSelector` as HTML
	var source = jQuery(options.sourceSelector),
	    text = source.text();
	jQuery(this).text(text);
}

This is, however, not a safe plugin, since the call to jQuery interprets sourceSelector as HTML if it is a string that starts with <.

Instead of documenting that the client is responsible for sanitizing sourceSelector, the plugin can use jQuery.find to always interpret sourceSelector as a CSS selector:

jQuery.fn.copyText = function(options) {
	// GOOD may not evaluate `options.sourceSelector` as HTML
	var source = jQuery.find(options.sourceSelector),
	    text = source.text();
	jQuery(this).text(text);
}

References

• OWASP: DOM based XSS Prevention Cheat Sheet.
• OWASP: XSS (Cross Site Scripting) Prevention Cheat Sheet.
• OWASP DOM Based XSS.
• OWASP Types of Cross-Site Scripting.
• Wikipedia: Cross-site scripting.
• jQuery: Plugin creation.
• Bootstrap: XSS vulnerable bootstrap plugins.
• Common Weakness Enumeration: CWE-79.
• Common Weakness Enumeration: CWE-116.

add integrity check information on assets loaded from cdn

• https://github.com/novalagung/muslimboard/security/code-scanning/4
• https://github.com/novalagung/muslimboard/security/code-scanning/5
• https://github.com/novalagung/muslimboard/security/code-scanning/6
• https://github.com/novalagung/muslimboard/security/code-scanning/7

Adding more localization

Dear @novalagung

Do you have a plan to add more localization?
My Taiwanese Muslim asked me if MuslimBoard can support their languages (Traditional Chinese zh-tw).

Adding feature to share quotation

Dear @novalagung, I am so glad that I found this browser extension. Jazakallah Khairan Katsiran.
Btw, I have a request to share the quote from the Quran verse on social media platforms.

Arabic localization

Adding new localization require two changes:

1. On extension/assets/internal/scripts/i18n.js file, add the arabic translation.

2. On extension/assets/internal/scripts/app.js#L853-L860 file, add the arabic option to the dropdown

Crowdin for muslimboard (web) localization

Can you add a menu for manually change the timezone? please..

can you add a menu to manually change the timezone?

coz my default PC timezone is UTC and the detected location is WIB, so the prayer time follows my UTC time.

Jazakallahu Khairan Katsiran
Terima kasih

Provides option to manually set location on location data popup error

Salam @novalagung,
I'm impressed with this extension and would be grateful if be allowed to contribute

When I run this extension for the first time then a popup appears where it fails to detect the user's position, what if I try to add a button (choose manual location) to the popup, so when the user clicks the button it should open a manual location setup popup?

Thanks

Add integration to google calendar

Akh Agung, Jazakumullahu khoiron for developing this plugin.

btw, i don't really todolist on this plugin because it not sync with another platform. then after sometime, I think after awhile it would very usefull if we can see our agenda on google calendar on muslimboard screen. the calendar displayed on agenda mode so we remember our next meeting based on google calendar.

I am happy to hear what you think about this idea

Barakallahu fiikum

Slightly Incorrect Prayer Times

The prayer times provided in the extension is kinda incorrect. As you can see here, Muslim Pro shows this in the capital city of Indonesia, Jakarta.
Why Muslim Pro you asked? Well, because I can't find a single app which is more accurate than Muslim Pro, I even cross-checked it into many masjids, and it's correct (sometimes it's 1 or 2 minutes different)

And here are the prayer times provided by the extension (set manually and choose Jakarta)

Either way, syukron for this beautiful extension

Fix code scanning alert - Uncontrolled data used in network request

Tracking issue for:

• https://github.com/novalagung/muslimboard/security/code-scanning/2

Correction of a hadith

Assalamu alaikum wa rahmatullahi wa barakatuh,
There is a messing letter in the quote
مَا نَقَصَتْ صَدَقَةٌ مِنْ مَالٍ وَمَا زَادَ اللَّهُ عَبْدًا بِعَفْوٍ إِلاَّ عِزًّا وَمَا تَوَاضَعَ أَحَدٌ لِلَّهِ إِلاَّ رَفَعَهُ اللَّ

Charity does not decrease wealth, no one forgives another except that Allah increases his honor, and no one humbles himself for the sake of Allah except that Allah raises his status

at the end of the hadith in arabic a letter is messing:

مَا نَقَصَتْ صَدَقَةٌ مِنْ مَالٍ وَمَا زَادَ اللَّهُ عَبْدًا بِعَفْوٍ إِلاَّ عِزًّا وَمَا تَوَاضَعَ أَحَدٌ لِلَّهِ إِلاَّ رَفَعَهُ اللَّ ❌

مَا نَقَصَتْ صَدَقَةٌ مِنْ مَالٍ وَمَا زَادَ اللَّهُ عَبْدًا بِعَفْوٍ إِلاَّ عِزًّا وَمَا تَوَاضَعَ أَحَدٌ لِلَّهِ إِلاَّ رَفَعَهُ اللَّهُ✅
source of the hadith :https://sunnah.com/muslim:2588

Direction is ltr instead of rtl in Arabic language

Assalamu alaikum wa rahmatullahi wa barakatuh,
I'm happy to see the new version may Allah reward you immensely. There's just a small note the direction is still ltr. It has to be rtl. I've made this change already in the commits.

Thanks in advance.

Error Fetching Data

recently i have problem

My internet is smooth and there are no problems, i open a console and got an error like this

is the Muslim board service down? or there is a bug or error on my computer?

Link show incorrect page

It showing link under quotes that is clickable

But it's showing incorrect link when user clicked

refactor the website codes

the last time Muslim board website updated is around 3 or 4 years ago. it's really outdated in terms of technology.
I need a hand here to work on it.

FYI: the website is deployed to GitHub pages, any proposed changes are okay as long as it generates compact static HTML files

Quote to be added

please add imsak schedule when ramadhan months please