se.diagrams.net, more secure diagramming for Google Workspace

[davidjgraph]

We're currently in the process of trialling a new version of diagrams.net specifically for Google Workspace (although, any Google account could use it). The site is https://se.diagrams.net

The key differences are:

• The Content Security Policy is much stricter. A lot of the script-src entries are removed and the CSP adds a number of the directives missing in the standard app.
• Lockdown mode is enforced by default. This mean no data egress anywhere apart from to/from Google Drive. That means export to PDF is replaced with print to PDF, vsd support is removed, EMF images support within vsdx files is removed and PlantUML support is removed.
• Plugins are disabled.
• All storage options other than Google Drive will be disabled.
• This sub-domain will be updated 1-2 hours after app.diagrams.net. This allows us to confirm the release is stable across a large user base prior to setting it live on the se sub-domain.
• We'll probably enforce all diagram opening/creation as going via drive.google.com. This has a number of security advantages, but isn't currently implemented.

If you are part of an organisation with security concerns in these areas, we can enable up to 100 Google emails to access the Drive API for this project. We can allow each org 1 or 2 accounts on a test domain (do not use in production). Please file a ticket at the diagrams.net support desk with the accounts to be enabled.

Please only do this if your org is serious about evaluating this version since numbers are limited.

At the moment we have no plans to charge (or any billing system, for that matter).

[davidjgraph]

There wasn't any real demand for this, so we'll port the security improvements over to the main diagrams.net implementation and close this down.