This page lists some problems and their solutions that may occur when using your Zettelstore.
Problem: When you double-click on the Zettelstore executable icon, macOS complains that Zettelstore is an application from an unknown developer. Therefore, it will not start Zettelstore.
Problem: When you double-click on the Zettelstore executable icon, Windows complains that Zettelstore is an application from an unknown developer.
Problem: Authentication is enabled for a local running Zettelstore and there is a valid user zettel for the owner. But entering user name and password at the web user interface seems to be ignored, while entering a wrong password will result in an error message.
Problem: When you delete a zettel file by removing it from the “disk”, e.g. by dropping it into the trash folder, by dragging into another folder, or by removing it from the command line, Zettelstore sometimes did not detect that change. If you access the zettel via Zettelstore, an error is reported.
Problem: You have entered some HTML code as content for your Zettelstore, but this content is not shown on the Web User Interface.
You may have entered a Zettel with syntax “html”, or you have used an inline-zettel block with syntax “html”, or you entered a Zettel with syntax “markdown” (or “md”) and used some HTML code fragments.
Explanation: Working with HTML code from unknown sources may lead to severe security problems. The HTML code may force web browsers to load more content from external server, it may contain malicious JavaScript code, it may reference to CSS artifacts that itself load from external servers and may contain malicious software. Zettelstore tries to do its best to ignore problematic HTML code, but it may fail. Either because of unknown bugs or because of yet unknown changes in the future.
Zettelstore sets a restrictive Content Security Policy, but this depends on web browsers to implement them correctly and on users to not disable it. Zettelstore will not display any HTML code, which contains a <script>>
or an <iframe>
tag. But attackers may find other ways to deploy their malicious code.
Therefore, Zettelstore disallows any HTML content as a default. If you know what you are doing, e.g. because you will never copy HTML code you do not understand, you can relax this default.
Solution 1: If you want zettel with syntax “html” not to be ignored, you set the startup configuration key insecure-html to the value “html”.
Solution 2: If you want zettel with syntax “html” not to be ignored, and want to allow HTML in Markdown, you set the startup configuration key insecure-html to the value “markdown”.
Solution 3: If you want zettel with syntax “html” not to be ignored, and want to allow HTML in Markdown, and want to use HTML code within Zettelmarkup, you set the startup configuration key insecure-html to the value “zettelmarkup”.
Problem: If you are searching for zettel with zettel content “EUPL”, the zettel with Zettelstore's License is not shown, but it does contain the character sequence “EUPL”.