SShortSingh.
Back to feed

Developer builds TGDown Chrome extension for one-click Telegram Web media downloads

0
·59 views

A developer has released TGDown, a Manifest V3 Chrome extension built with TypeScript and Vue that adds download controls for images and videos directly within Telegram Web. The extension supports both Telegram Web interfaces and offers one-click downloads, batch downloads from search results, and a popup panel listing detected media. TGDown operates across three execution contexts — a content script, a page-context script, and extension pages — to stay isolated from Telegram's internal code while using its existing authenticated session. During development, a critical dark-mode bug caused the entire Telegram page to flash white due to a full-screen iframe rendering the browser's default white canvas before initializing. The developer resolved the issue by replacing the iframe approach with a Shadow DOM host, which maintains CSS isolation without introducing a separate document rendering surface.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Log in to join the discussion and vote.

Log in

Related stories

0
ProgrammingDEV Community ·

Solo Swiss developer unveils EDNA, a device-local system to verify human users without biometrics

An independent developer based in Bern, Switzerland, has built OpenOS EDNA, a system aimed at distinguishing humans from bots online. The tool analyzes subtle behavioral patterns such as mouse timing, scroll rhythm, and touchpad pressure directly on the user's device. Only a verification result leaves the device, so no camera scans, ID uploads, or cloud-stored biometric data are needed. The system also offers a passwordless login tied to a cryptographic identity chain, and the developer has published a public verification test suite for independent checking. The creator describes the project as an independent effort with no investors or corporate backing.

0
ProgrammingDEV Community ·

Kisumu Market Day brings creators and makers together at Baraza Media Lab

A developer who usually writes about code and Bitcoin Lightning wallet work from Kisumu, Kenya, stepped away from the keyboard to attend Kisumu Market Day. The two-day event at Baraza Media Lab gathers the city's creators, makers and storytellers, and it opened with a photo exhibition about Lake Victoria. The author went because the people building things locally are the ones their tools are meant to serve, and in-person conversations reveal needs more clearly than an issue tracker. The second day is set for Saturday, 14 November, from 8:30am to 7pm at Lake Basin Mall. The author noted the post is not sponsored.

0
ProgrammingDEV Community ·

Fake CRA Calls and Texts Target Canadians With Arrest Threats and Refund Lures

Scammers posing as Canada Revenue Agency officers are phoning and texting Canadians with threats of arrest or fake refund offers. Callers claim a warrant has been issued over unpaid taxes and demand immediate payment, often through gift cards, cryptocurrency, or e-transfers. Texts promising unclaimed refunds direct recipients to counterfeit government login pages designed to harvest personal and banking details. The Canada Revenue Agency does not demand payment this way or threaten police action. Authorities advise hanging up, checking accounts directly through canada.ca, and reporting the attempt to the Canadian Anti-Fraud Centre.

0
ProgrammingDEV Community ·

HPE Warns of Critical ArubaOS AOS-10 Authentication Bypass, CVE-2026-79874

Hewlett Packard Enterprise has published an advisory for CVE-2026-79874, an authentication bypass in an AOS-10 API of its ArubaOS networking software that it rates 9.3 Critical. An unauthenticated attacker on the adjacent network could circumvent authentication controls, potentially gaining administrative access, changing system configuration, or exposing sensitive data. Affected ranges include 10.8.0.0 to 10.8.1.1, 10.7.0.0 to 10.7.2.6, and 10.4.0.0 to 10.4.1.13, while AOS-8 is not listed for this CVE. HPE advises upgrading to 10.8.1.2 or later, 10.7.2.7 or later, or 10.4.1.14 or later as applicable. Public details on the exact endpoint and exploit method remain limited, and no evidence of exploitation has been reported.