
I have today released another update which is in response to a critical vulnerability in React Server Components (which is core to how the DearDiary.Net software works). The vulnerability was announced yesterday. More details about that vulnerability are available at https://react.dev/blog/2025/12/03/critical-security-vulnerability-in-react-server-components although the details themselves are deliberately vague on how it would be exploited.
Nevertheless, I have performed the operations outlined in the fix section for this and I don't believe there are any ways to exploit it currently in the wild. It is very unlikely that anyone would have done so at this point.
I also never fully got around to highlighting the new release details so here's some highlights;
- The UI now has a more modern and polished look. Transparency now also includes a background blur to make readability easier but also just looks a lot more cool.
- Mobile UI has had a massive overhaul. The entire development this time was a mobile first endeavour whereby we built the interface and tested on mobile first. There are still some aspects that aren't as good as we'd like, but it's orders of magnitude more usable on mobile now than it previously was.
- The Lexical editor which powers the main editing system was previously using the Lexical Playground demonstration with some customizations for DearDiary. We now use our own, redesigned editor customizations with no Playground code. It is still of course using Lexical (as was Playground). But this is a much simplified system, with a lot more flexibility than Playground had.
- The creative flow for entries has changed. Previously a lot of screen real-estate was taken up with a large header which displayed the title, date, privacy options etc. This subconsciously took your attention away from the creativity of writing and put it on trying to determine a title. We felt that the entry itself deserved the focus, and so the flow now is that as soon as you hit the page you can start writing. When you click Save is the point when you'll be asked for a title, and the privacy and so on.
- We also removed the notify checkbox and replaced it with a Save and Notify button. That way you don't need to make two clicks if you want to notify.
- Drag and Drop image support. If you want to add an image to your entry, position the cursor where you want the image to land, and then simply drag and drop from your computer. The old way of going to the menu option to insert an image still works so don't worry.
- The main menu (on desktop) now holds all navigation options. Previously some were in the header, some in the footer. Everything you need to do on desktop is on that menu. There are two exceptions. Clicking the DD icon in the left will take you to the landing page. And the Dashboard menu item will always return you to your private dashboard.
- Many settings screens are no longer screens in their own right but popups that will enable you to change things whilst still keeping your focus on the current diary. For example, previously if you were working on writing an entry but decided (on a whim) that you wanted a new background image for your diary, you'd have to stop what you were doing, save the entry in an incomplete state, navigate to a new page and set the diary backgrounds (or theme or any of the other options you wanted). Now you can click Diary Settings, change what you want and then when the dialog box clears just carry on from where you left off.
- Many of the settings screens received a makeover. The diary background screen being one of the main ones.
- A paradigm shift for the way the site works, again thinking about how mobile apps would do things in the modern age compared to the more 'page by page' way a more traditional website would do thing. The system is now designed to deal primarily with one diary at a time - i.e. your focus is on one diary at a time.
- With this in mind, the dashboard provides information and statistics about the current diary you're working on - as well as some broader public information. More is expected on this over the coming few months so stay tuned.
- This all paves the way for more new and exciting things to come. The next of which (since I delivered the patch yesterday to enable header and footers for entries) will be to implement some form of search functionality which I know a lot of you have been waiting for :)
- There will also be bugs introduced so please don't hesitate to let me know if you find any!
Comments (4)
LOVE THE UPDATE AND ALL YOUR WORK 🙏 the only thing i've noticed is within the new text editor. the panel to change the text size has the minus/plus signs to decrease/increase, but in the middle of those buttons, where i'm pretty sure it's supposed to show the pixel size of the text, there's these up/down arrows covering the number. i've tried to change the size of my window, etc., but i just can't see the actual size number. xoxo
Glad you like it!
Can you let me know what browser you're using? Is it mobile or desktop? Those up and down arrows are meant to be removed and they are in Chrome/Brave/Safari (at least they should be) so maybe it's a browserism...
Let me know which browser and I'll dig into it. Thanks for letting me know!
ah, i'm on firefox so that explains it!
Thanks, I’ll look into it and get something sorted