Commit Graph

1060 Commits

Author SHA1 Message Date
hackademix 9bf46cf5b6 Several hacks to make non-distruptive updates compatible with Chromium. 2020-08-21 01:57:30 +02:00
hackademix a59da576a4 Tighten localPolicy persistence mechanism during reloads. 2020-08-20 19:46:42 +02:00
hackademix 810cab512b Version bump: 11.0.39rc8. 2020-08-20 19:46:42 +02:00
hackademix 7785661d97 Temporary settings survival more resilient and compatible with Fenix. 2020-08-20 15:56:52 +02:00
hackademix fa81d3791a [L10n] Updated es. 2020-08-20 12:39:05 +02:00
hackademix 72f9800e09 Version bump: 11.0.39rc7. 2020-08-20 08:06:06 +02:00
hackademix affe284193 Fix reload loops on broken file: HTML documents (thanks bernie for report). 2020-08-20 00:13:53 +02:00
hackademix a83cf372eb [XSS] Updated HTML event attributes. 2020-08-19 21:35:41 +02:00
hackademix 64876214e3 Version bump: 11.0.39rc6. 2020-08-19 21:35:23 +02:00
hackademix 7809f165de Local policy fallback for file: and ftp: URLs using window.name rather than sessionStorage. 2020-08-19 15:04:47 +02:00
hackademix 508479f26c [L10n] Updated bn, br, ca, da, de, el, es, fr, he, is, it, ja, lt, mk, ms, nb, nl, pl, pt_BR, ru, sq, sv_SE, tr, zh_CN, zh_TW. 2020-08-19 14:56:35 +02:00
hackademix e03d91d0b8 Renamed optionto "Revoke temporary permissions on NoScript updates, even if the browser is not restarted". 2020-08-18 20:24:04 +02:00
hackademix 59219eed0a Version bump: 11.0.39rc5. 2020-08-18 20:23:25 +02:00
hackademix 8e694a603c Added option to forget temporary settings immediately whenever NoScript gets updated. 2020-08-18 17:31:12 +02:00
hackademix 2905a6a543 Fixed regression: file:/// URLs reloaded whenever NoScript gets reinstalled / enabled / reloaded. 2020-08-18 17:31:12 +02:00
hackademix b38a561ac3 More resilient and easy to debug survival data retrieving. 2020-08-18 17:31:12 +02:00
hackademix 300cd0e675 Version bump: 11.0.39rc4. 2020-08-18 17:31:12 +02:00
hackademix 5ef6980d56 Fixed regression causing manual NoScript downgrades to be delayed until manual restart. 2020-08-18 12:47:07 +02:00
hackademix 2410d373ce Version bump: 11.0.39rc3. 2020-08-18 12:46:37 +02:00
hackademix 937fab04d2 Let temporary permissions survive NoScript updates (shameless hack). 2020-08-18 00:45:37 +02:00
hackademix 5c99ed053b Fixed some traps around Messages abstraction. 2020-08-18 00:45:37 +02:00
hackademix 2850f631b9 Ignore search / hash on policy matching of domain-less URLs (e.g. file:///...). 2020-08-18 00:45:37 +02:00
hackademix 3f8d2a0bad Removed useless CSS property. 2020-08-18 00:45:37 +02:00
hackademix 1bc51b5313 Updated TLDs. 2020-08-18 00:45:37 +02:00
hackademix 53356ab655 Version bump: 11.0.39rc2. 2020-08-15 17:46:05 +02:00
hackademix 495dfc8ba5 Updated TLDs. 2020-08-14 23:31:05 +02:00
hackademix d1b10a9bb1 Fixed automatic scrolling hampers usability on long sites lists in popup. 2020-08-14 22:32:44 +02:00
hackademix 40a33368fc Fixed typo in vendor-prefixed CSS. 2020-08-14 22:31:47 +02:00
hackademix b9124f4fcb Version bump: 11.0.39rc1. 2020-08-14 22:30:44 +02:00
hackademix 6fe89a4e46 Version bump: 11.0.38. 2020-08-13 12:45:00 +02:00
hackademix fb8fa90cb8 Better timing for event attributes removal/restore. 2020-08-13 09:27:09 +02:00
hackademix 06a4d2756e Version bump: 11.0.38rc2. 2020-08-13 08:48:46 +02:00
hackademix 1e36986795 Work-arounds for edge cases in synchronous page loads bypassing webRequest (thanks skriptimaahinen). 2020-08-13 00:32:03 +02:00
hackademix d4c2ab2c05 [L10n] Updated bn. 2020-08-10 23:58:46 +02:00
hackademix be08be9582 Version bump: 11.0.38rc1. 2020-08-10 23:58:18 +02:00
hackademix 5e867071c8 Version bump: 11.0.37. 2020-08-10 23:45:28 +02:00
hackademix 4cf7b231a7 Simpler and more reliable sendSyncMessage implementation and usage. 2020-08-10 23:12:00 +02:00
hackademix dcc779b1cf Updated TLDs. 2020-08-10 23:10:23 +02:00
hackademix d445c35663 Version bump: 11.0.37rc3. 2020-08-10 23:06:59 +02:00
hackademix 1fc18ed6a8 SyncMessage suspending on DOM modification as well. 2020-08-09 23:58:12 +02:00
hackademix 94d78ef404 Version bump: 11.0.37rc2. 2020-08-09 23:58:12 +02:00
hackademix a977563b88 sendSyncMessage support for multiple suspension requests (should fix extension script injection issues). 2020-08-08 09:27:15 +02:00
hackademix d56eb371a9 Version bump: 11.0.37rc1. 2020-08-07 23:26:42 +02:00
hackademix 5646ea9305 Version bump: 11.0.36. 2020-08-07 07:42:58 +02:00
hackademix ead6080759 Fixed regression: temporary permissions revocation not working anymore on privileged pages. 2020-08-07 00:09:45 +02:00
hackademix aaf5a3d0a6 SendSyncMessage script execution safety net more compatible with other extensions (e.g. BlockTube). 2020-08-07 00:06:23 +02:00
hackademix c61d11944b Version bump: 11.0.36rc1. 2020-08-06 23:18:41 +02:00
hackademix 290f721123 Version bump: 11.0.35. 2020-08-06 00:29:10 +02:00
hackademix 23e89b6998 Updated TLDs. 2020-08-06 00:29:05 +02:00
hackademix 1dd7d43384 Avoid unnecessary reloads on temporary permissions revocation. 2020-08-03 20:40:40 +02:00
hackademix 51c9ac2c83 Fixed potentially infinite loop in SyncMessage Firefox implementation. 2020-08-03 20:40:40 +02:00
hackademix 546277aaff [UI] Removed accidental cyan background for site labels. 2020-08-03 20:40:40 +02:00
hackademix 36cfc9b465 [L10n] Updated es. 2020-08-03 20:40:40 +02:00
hackademix 8c3c7a1f27 Version bump: 11.0.35rc4. 2020-08-03 20:40:40 +02:00
hackademix 762b0122ce Work-around for conflict with extensions inserting elements into content pages' DOM early. 2020-08-02 13:27:56 +02:00
hackademix 7af5194ef5 [XSS] Updated HTML events. 2020-08-02 13:27:56 +02:00
hackademix f6fb21b6fc Version bump: 11.0.35rc3. 2020-08-02 13:27:56 +02:00
hackademix 76d35299e1 Updated TLDs. 2020-07-29 16:23:56 +02:00
hackademix 93a2048699 Fixed buggy policy references in the Options dialog. 2020-07-29 16:23:56 +02:00
hackademix 35d82bd801 More accurate NOSCRIPT element emulation. 2020-07-29 16:23:56 +02:00
hackademix 5d92d1b974 Anticipate onScriptDisabled surrogates to first script-src 'none' CSP violation. 2020-07-29 16:23:56 +02:00
hackademix 67d4a97fdc isTrusted checks for all the content events. 2020-07-29 16:23:56 +02:00
hackademix 33f79c0964 Improved look in mobile portrait mode. 2020-07-29 16:23:56 +02:00
hackademix 3f5b0e90f4 Version bump: 11.0.35rc2. 2020-07-29 16:23:56 +02:00
hackademix 2e44f39c44 Let SyncMessage prevent undesired script execution scheduled during suspension. 2020-07-10 22:39:36 +02:00
hackademix c3b2270b8f Version bump: 11.0.35rc1. 2020-07-10 22:36:22 +02:00
hackademix 3d3331ee93 Version bump: 11.0.34. 2020-07-10 18:22:02 +02:00
hackademix 4d18298930 Fixed regression breaking network-based CSP injection. 2020-07-10 18:18:32 +02:00
hackademix fd7c5b08e9 Version bump: 11.0.34rc1. 2020-07-10 18:17:00 +02:00
hackademix aea8148f74 Version bump: 11.0.33. 2020-07-09 23:28:28 +02:00
hackademix e7b6805bb4 Switch from HTTP to DOM event based CSP reporting in compatible browsers. 2020-07-09 22:02:05 +02:00
hackademix b2ac66f36f [XSS] Updated HTML event attributes. 2020-07-09 22:00:24 +02:00
hackademix 6a685309e5 Updated TLDs. 2020-07-09 21:54:30 +02:00
hackademix ac9fb0cd1c Version bump: 11.0.33rc1. 2020-07-09 21:36:55 +02:00
hackademix f7b9bf3ff5 Version bump: 11.0.32. 2020-06-22 16:17:41 +02:00
hackademix 03725230f3 [L10n] Updated it, mk, sv_SE. 2020-06-20 15:05:42 +02:00
hackademix 68a5e9b7d7 Fixed setting CUSTOM permissions in private mode may cause the TRUSTED preset to become temporary. 2020-06-20 15:05:42 +02:00
hackademix 5850a2ae14 Updated TLDs. 2020-06-20 15:05:42 +02:00
hackademix 4087deca9b [XSS] Updated HTML 5 events support. 2020-06-20 15:05:42 +02:00
hackademix 9614be3db5 More compact high contrast appearance. 2020-06-20 15:05:42 +02:00
hackademix de6e67f071 Version bump: 11.0.32rc1. 2020-06-16 23:57:39 +02:00
hackademix 49e4767176 Version bump: 11.0.31. 2020-06-08 18:02:46 +02:00
hackademix c3127b7a4d Focus "OK" button on dialog-mode UI. 2020-06-06 22:03:11 +02:00
hackademix 54da001682 [L10n] Updated da. 2020-06-06 21:56:59 +02:00
hackademix db0e9b7592 Fixed various toolbar buttons DnD graphic issues. 2020-06-06 21:56:59 +02:00
hackademix 5715c41c6c Version bump: 11.0.31rc2. 2020-06-06 21:56:59 +02:00
hackademix 6fbbfa6d21 [L10n] Updated bn, br, ca, da, de, el, es, fr, he, is, it, ja, lt, mk, ms, nb, nl, pl, pt_BR, ru, sq, sv_SE, tr, zh_CN, zh_TW. 2020-06-05 20:50:47 +02:00
hackademix 4bb222b6d9 Fixed very low contrast HTTPS-only label in High Contrast mode. 2020-06-05 20:38:21 +02:00
hackademix d2f43eb305 More precise DnD of toolbar buttons + work-around for https://bugzilla.mozilla.org/show_bug.cgi?id=568313 2020-06-05 20:25:21 +02:00
hackademix 93fa4ad7dc Version bump: 11.0.31rc1. 2020-06-05 20:25:21 +02:00
hackademix f6f0c99f4d Version bump: 11.0.30. 2020-06-04 02:04:41 +02:00
hackademix aeb3b15543 Discoverable option to force site-leaking UI in PBM/Incognito. 2020-06-04 01:56:51 +02:00
hackademix 5e1f53dc34 [L10n] Updated he. 2020-06-03 23:11:03 +02:00
hackademix 435118b715 Easier keyboard navigation of preset configuration. 2020-06-03 23:10:17 +02:00
hackademix e312b8fcf8 Yellow-less UI palette. 2020-06-03 23:04:47 +02:00
hackademix fb77f20dee Version bump: 11.0.30rc1. 2020-06-03 22:50:06 +02:00
hackademix aec0f866fb Version bump: 11.0.29. 2020-06-02 18:22:31 +02:00
hackademix a00bf03e16 Consistent focus appearance across desktop and mobile. 2020-06-02 18:18:12 +02:00
hackademix b2def01a63 Fixed regression on Firefox 68 for Android: UI cannot be closed (thanks swalchko for report). 2020-06-02 17:57:08 +02:00
hackademix 4872b91be1 Version bump: 11.0.29rc1. 2020-06-02 17:50:11 +02:00
hackademix 7aaf2dc4aa Version bump: 11.0.28. 2020-06-01 21:25:34 +02:00
hackademix 872ef51da7 Version bump: 11.0.27. 2020-06-01 21:16:46 +02:00
hackademix b74d48366e Don't enforce Incognito UI restrictions if the "Override Tor Browser Security Level preset" option is checked. 2020-06-01 20:59:25 +02:00
hackademix 2d5f47563c Version bump: 11.0.27rc6. 2020-06-01 20:55:40 +02:00
hackademix 8b4d146edc Enter key closes the popup also while editing the CUSTOM preset. 2020-06-01 19:56:24 +02:00
hackademix 27ddb8124d Incognito-aware permissions persistence and UI (https://trac.torproject.org/projects/tor/ticket/29957) 2020-06-01 19:50:44 +02:00
hackademix 890c3a0a55 Removed inline preset options relics. 2020-06-01 18:00:35 +02:00
hackademix 26e6541d9b Version bump: 11.0.27rc5. 2020-06-01 17:53:35 +02:00
hackademix 2b5e9bb226 Fixed first capability checkbox accidentally "clicked" when opening CUSTOM by space bar. 2020-05-31 18:13:14 +02:00
hackademix bbcf630866 [A11y] Keyboard accelerators for toolbar buttons. 2020-05-31 18:11:51 +02:00
hackademix 162dd17a7a Version bump: 11.0.27rc4. 2020-05-31 16:40:00 +02:00
hackademix 56b939f6a2 Further keyboard UI accelerators. 2020-05-31 12:36:10 +02:00
hackademix e424fe9aa8 Reset non-secure site matches to DEFAULT unless setting UNTRUSTED to avoid confusion on preset changes. 2020-05-31 12:36:10 +02:00
hackademix ab6b390569 Version bump: 11.0.27rc3. 2020-05-31 11:17:47 +02:00
hackademix 2d48680cf6 [A11y] Keyboard-based UI navigation. 2020-05-31 00:20:07 +02:00
hackademix 69c3fa7599 Updated TLDs. 2020-05-31 00:20:07 +02:00
hackademix 3c12208311 Minor comment fix. 2020-05-31 00:20:07 +02:00
hackademix 16f8856264 Unspoofable browser version detection. 2020-05-31 00:20:07 +02:00
hackademix 65ca612e56 Version bump: 11.0.27rc2. 2020-05-29 00:27:50 +02:00
hackademix 9e23c15b79 Updated TLDs. 2020-05-28 00:53:10 +02:00
hackademix e74d197ccb Work-around Gecko 77 cached CSP issues (thanks acat for reporting https://trac.torproject.org/projects/tor/ticket/34305) 2020-05-28 00:53:02 +02:00
hackademix d486a96254 Remove active preset hilight at least until keyboard navigation is fixed. 2020-05-28 00:50:08 +02:00
hackademix 49bf7914f9 Version bump: 11.0.27rc1. 2020-05-27 23:27:04 +02:00
hackademix 1fa8f16379 Version bump: 11.0.26. 2020-05-17 01:24:02 +02:00
hackademix 1ff6071062 UI adjustments for better mobile experience (thanks Bram Pitoyo for suggestions). 2020-05-17 01:18:32 +02:00
hackademix 1596978848 Version bump: 11.0.26rc2. 2020-05-17 01:15:16 +02:00
hackademix c7fe4a3d94 Updated TLDs. 2020-05-15 21:34:53 +02:00
hackademix 212e6e2358 Fixed hard reload needed after releasing restrictions (regression on Firefox Beta). 2020-05-15 21:34:39 +02:00
hackademix 63ca29158a Fixed 3rd party scripts blocking regression on Firefox Trunk due to XBL removal (thanks guardao for reporting). 2020-05-15 21:33:16 +02:00
hackademix 7c8b75a671 Fixed typo in unused yet code. 2020-05-15 21:31:30 +02:00
hackademix d52358ffd2 Version bump: 11.0.26rc1. 2020-05-15 21:30:44 +02:00
hackademix 9f419ba490 Version bump: 11.0.25. 2020-04-19 23:49:27 +02:00
hackademix 1e01979e41 [XSS] Fixed false positives and timeouts (thanks riaggren for report). 2020-04-19 23:43:28 +02:00
hackademix 97c7cc74f3 Version bump: 11.0.25rc1. 2020-04-19 23:40:05 +02:00
hackademix 255548e2f4 Version bump: 11.0.24. 2020-04-16 19:58:01 +02:00
hackademix 8b130350ec Fixed SoundCloud login broken by NoScript being enabled. 2020-04-16 19:53:18 +02:00
hackademix bb00cb8c8b [XSS] Updated HTML5 events. 2020-04-16 19:52:17 +02:00
hackademix 861d38b654 Updated TLDs. 2020-04-16 19:47:37 +02:00
hackademix c4ad43c539 Version bump: 11.0.24rc1. 2020-04-16 19:46:36 +02:00
hackademix c3510de256 Version bump: 11.0.23. 2020-03-25 15:04:23 +01:00
hackademix 8acd1551d7 Updated TLDs. 2020-03-25 14:59:48 +01:00
hackademix 24aedad38c Further refresh syntax parsing leniency (thanks insertscript). 2020-03-25 14:59:48 +01:00
hackademix f101661175 Version bump: 11.0.23rc1. 2020-03-25 14:56:49 +01:00
hackademix 968fcd54a9 Version bump: 11.0.22. 2020-03-22 11:24:41 +01:00
hackademix 4a032f2411 Updated TLDs. 2020-03-22 11:06:13 +01:00
hackademix 8b12d19a2c [L10n] Updated he. 2020-03-22 11:06:07 +01:00
hackademix ab131302cd Uniform refresh url matching across HTTP and DOM checks (thanks insertscript). 2020-03-22 11:05:15 +01:00
hackademix 3fc639245b Version bump: 11.0.22rc1. 2020-03-22 10:54:26 +01:00
hackademix fe91ffe8d2 Version bump: 11.0.21. 2020-03-21 02:01:24 +01:00
hackademix 8b3a36b2e4 Fixed URL matching regexp (thanks insertscript). 2020-03-21 01:55:22 +01:00
hackademix e1cf2bb670 Version bump: 11.0.21rc1. 2020-03-21 01:53:45 +01:00
hackademix 8ae5c6a590 Version bump: 11.0.20. 2020-03-20 23:12:01 +01:00
hackademix ab2f078ca6 More aggressive blocking for data: refresh attempts (thanks insertscript). 2020-03-20 22:20:28 +01:00
hackademix 949d930662 Version bump: 11.0.20rc1. 2020-03-20 22:19:15 +01:00
hackademix 27d7d24aa5 Version bump: 11.0.19. 2020-03-18 22:56:50 +01:00
hackademix 5aff2e1d83 Prevent ANY redirection to data: URIs in documents. 2020-03-18 22:51:07 +01:00
hackademix 9b3a12f9a3 Version bump: 11.0.19rc1. 2020-03-18 16:21:52 +01:00
hackademix 4473f34d74 Version bump: 11.0.18. 2020-03-16 22:19:12 +01:00
hackademix 45de947fa0 Updated TLDs. 2020-03-16 19:33:27 +01:00
hackademix 02c1b2bed0 Apply "font-family: Inter" to the mobile stylesheet only. 2020-03-16 19:33:27 +01:00
hackademix a7e8e768d8 Version bump: 11.0.18rc1. 2020-03-16 19:10:56 +01:00
hackademix 31bdb5649a Version bump: 11.0.17. 2020-03-13 23:11:49 +01:00
hackademix f6d1c55eee Version bump: 11.0.16. 2020-03-13 23:03:11 +01:00
hackademix 6f5bd39323 Updated TLDs. 2020-03-13 22:37:22 +01:00
hackademix d8332adc4e Force CSP inheritance for redirections to data: URIs on Gecko pre-69. 2020-03-13 22:37:22 +01:00
hackademix c44ab6f8aa Added CSS reference to Inter font to improve UI look on Fenix. 2020-03-13 22:37:22 +01:00
hackademix cf89cf2848 Version bump: 11.0.16rc1. 2020-03-12 20:58:08 +01:00
hackademix a3750a3ad9 Version bump: 11.0.15. 2020-03-01 22:52:33 +01:00
hackademix 8f2f845856 Fixed CapsCSP bug allowing data: URLs to bypass font blocking (thanks dcent and skriptimaahinen). 2020-03-01 22:17:55 +01:00
hackademix acddfd8e79 [XSS] Prevent DOS detection from being triggered for already aborted requests (thanks therube). 2020-03-01 22:17:20 +01:00
hackademix 9981a1cc7b Version bump: 11.0.15rc1. 2020-03-01 12:15:23 +01:00
hackademix e9822e8d3a Version bump: 11.0.14. 2020-02-29 21:30:51 +01:00
hackademix 0db8791bf9 [L10n] Updated es and added bn. 2020-02-29 19:46:25 +01:00
hackademix fad07d98d6 [XSS] More accurate base64 checks on hash. 2020-02-29 19:43:17 +01:00
hackademix 8e90f2a8fe Updated TLDs. 2020-02-29 19:43:17 +01:00
hackademix e6af4b07c1 Minor adjustments for Firefox Preview (Fenix) compatibility. 2020-02-29 19:03:39 +01:00
hackademix 9a664f7b3b Refactored XSS filter into an asynchronous worker to better handle DOS attempts. 2020-02-29 19:01:45 +01:00
hackademix e48c2053df [XSS] Abort on InjectionChecker timeouts. 2020-02-10 08:53:22 +01:00
hackademix 979334df56 [XSS] Updated recognized HTML events. 2020-01-30 22:56:14 +01:00
hackademix db18e95a9b Fixed autoreload after popup closing broken on Vivaldi. 2020-01-30 22:56:14 +01:00
hackademix 927851e0fe Version bump: 11.0.14rc1. 2020-01-30 22:56:14 +01:00
hackademix 19dabf6c91 Version bump: 11.0.13. 2020-01-09 21:47:00 +01:00
hackademix d18138c152 [Chromium] Fix SyncMessage broken by feature-policy headers. 2020-01-09 21:42:03 +01:00
hackademix e886d7bea0 Version bump: 11.0.13rc1. 2020-01-09 21:06:02 +01:00
hackademix cbff25a46f Version bump: 11.0.12. 2020-01-08 19:26:30 +01:00
hackademix 42a2b73f0c [L10n] Updated ru. 2020-01-08 15:51:50 +01:00
hackademix 34746e8be4 Unrestricted tab support for service workers and their included 3rd party scripts. 2020-01-08 15:45:02 +01:00
hackademix ae8317da00 Record document origins in TabStatus. 2020-01-08 13:54:01 +01:00
hackademix bd5acb2be3 Support for reporting service workers and their imported scripts in UI. 2020-01-08 12:54:50 +01:00
hackademix ce6e5a54a0 Cross-browser request properties normalization. 2020-01-07 21:43:38 +01:00
hackademix 029f585b2e Updated TLDs. 2020-01-07 21:29:50 +01:00
hackademix d9a903172f Fixed initial requst URL lost across redirections. 2020-01-07 21:13:53 +01:00
hackademix ab865d14c2 Fixed settings export button broken on Vivaldi (issue #124). 2019-12-30 15:37:48 +01:00
hackademix 6166f8f280 Version bump: 11.0.12rc2. 2019-12-30 15:27:29 +01:00
hackademix eaf3c8376e Fixed UNTRUSTED domains accidentally set in "match HTTPS only" mode (issue #126). 2019-12-29 19:49:44 +01:00
hackademix 3bf2aab052 Version bump: 11.0.12rc1. 2019-12-29 08:48:13 +01:00
hackademix b58225d478 Version bump: 11.0.11. 2019-12-29 01:25:49 +01:00
hackademix 30fb4f3fbf [L10n] Updated da, de, fr, he, it, mk, nl, ru, sq, tr, zh_TW. 2019-12-29 01:23:43 +01:00
hackademix cf5a0b05c0 Fixed UI not working on pages were sessionStorage is disabled. 2019-12-29 01:07:10 +01:00
hackademix 3a76c012df Version bump: 11.0.11rc2. 2019-12-29 00:57:57 +01:00
hackademix ae554ff21a Updated TLDs. 2019-12-25 23:10:43 +01:00
hackademix e2f7de8fea Added "ping" (beacon/ping) capability control. 2019-12-25 23:09:56 +01:00
hackademix 98aff58771 Version bump: 11.0.11rc1. 2019-12-25 22:08:43 +01:00
hackademix db31a12e1e Version bump: 11.0.10. 2019-12-23 23:44:27 +01:00
hackademix 1b8d1c784c [Chromium] Fixed no permissions given on first page load in a session. 2019-12-23 23:34:22 +01:00
hackademix 87cee12aec Updated TLDs. 2019-12-23 13:12:18 +01:00
hackademix db77624f82 Removed unused "privacy" permission. 2019-12-19 07:49:27 +01:00
hackademix 907a9ce31e Version bump: 11.0.10rc3. 2019-12-19 07:47:40 +01:00
hackademix 528c8ea577 Fixed shortcut and context menu doing nothing unless browserAction icon is visible on Firefox (issue #58). 2019-12-11 21:19:18 +01:00
hackademix 974d22848d [L10n] Updated de, fr, he, nl, tr. 2019-12-11 21:19:05 +01:00
hackademix c192c3b663 Updated TLDs. 2019-12-11 12:57:48 +01:00
Jordan Hewitt 36ac3a0989 Fix minor typo regarding appearance redundancy. Issue 61. 2019-12-10 08:40:40 +01:00
hackademix d1af69f0f3 Version bump: 11.0.10rc2. 2019-12-10 08:35:01 +01:00
hackademix ab4e48b0eb Updated TLDs. 2019-11-25 11:00:07 +01:00
hackademix cc87b48861 Fixed scripts could not be enabled on file: SVG documents. 2019-11-25 10:55:32 +01:00
hackademix fd7718e6f8 Version bump: 11.0.10rc1. 2019-11-25 10:49:31 +01:00
hackademix 831c23ab7b Version bump: 11.0.9. 2019-11-19 10:21:12 +01:00
hackademix 1fc69298f5 [Chromium] Prevent duplicated MSE placeholders (e.g. on Youtube). 2019-11-16 19:05:13 +01:00
hackademix a1afd19a0e Updated TLDs. 2019-11-16 10:12:35 +01:00
hackademix 10aee8015e Fixed external scripts included in HEAD of file:// pages failing (issue #115). 2019-11-16 10:08:48 +01:00
hackademix ae0fdc18e7 Version bump: 11.0.9rc2. 2019-11-16 09:55:11 +01:00
hackademix c4cfee6983 Debug statement to monitor settings changes. 2019-11-15 22:56:15 +01:00
hackademix 290ea152f5 [XSS] Updated HTML 5 events inventory. 2019-11-15 22:56:15 +01:00
hackademix 73f74cc83f Best effort to make media placeholders visible and clickable. 2019-11-15 22:56:15 +01:00
hackademix 118eb535aa Placeholders for MSE on Chromium too. 2019-11-15 22:56:15 +01:00
hackademix 53bf224e84 Use invalid IP rather than domain name to prevent offline status from breaking sync messaging in Chromium. 2019-11-15 22:56:15 +01:00
hackademix cbd814754a Removed empty exportFunction() Chromium shim. 2019-11-15 22:48:49 +01:00
hackademix 2434053524 Updated TLDs. 2019-11-15 22:48:49 +01:00
hackademix 52242ca147 Version bump: 11.0.9rc1. 2019-11-08 15:24:10 +01:00
hackademix 00757801c3 Version bump: 11.0.8. 2019-11-07 22:37:04 +01:00
hackademix 506d1f4c4d [L10n] Updated da, ja, lt, mk, nl. 2019-11-07 15:18:29 +01:00
hackademix 2b7cc563dd Fixed onionSecure setting persistence issue (Tor ticket #32362). 2019-11-07 15:14:34 +01:00
hackademix 035b4f2827 Fixed CSP DOM injection breaking XML documents rendering. 2019-11-07 15:12:25 +01:00
hackademix 07d7819666 Version bump: 11.0.8rc1. 2019-11-06 16:21:44 +01:00
hackademix 7fa342335b Version bump: 11.0.7. 2019-11-04 12:40:47 +01:00
hackademix b6ddc2d502 Use fragments to reinsert and run previously blocked scripts. 2019-11-03 13:32:07 +01:00
hackademix 4f08302084 Fetch policies asynchronously for about: and javascript: URLs. 2019-11-03 13:31:04 +01:00
hackademix 049485e495 Remove loop around XHR. 2019-11-03 13:29:34 +01:00
hackademix 0ac6b4de85 Version bump: 11.0.7rc1. 2019-11-03 11:29:33 +01:00
hackademix c4aff4e0cf Version bump: 11.0.6. 2019-11-01 15:25:02 +01:00
hackademix c74024ad36 Compute the correct origin for the policy to be fetched from about:blank and javascript: URLs. 2019-11-01 15:23:21 +01:00
hackademix cd37d7987d Work-around for Youtube video elements positioned off-display at replacement time. 2019-11-01 14:56:39 +01:00
hackademix 374f7815ed Version bump: 11.0.6rc3. 2019-11-01 11:10:38 +01:00
hackademix 491bf8eb33 Script blocking before policy is fetched only for synchronous loads. 2019-11-01 00:19:56 +01:00
hackademix 7c33fddd2c Version bump: 11.0.6rc2. 2019-11-01 00:19:56 +01:00
hackademix 08a41b3a62 Fixed bug in policy fetching. 2019-10-31 23:52:54 +01:00
hackademix 25fd1727b6 Make tests not to run automatically on dev mode startup anymore. 2019-10-31 23:51:50 +01:00
hackademix d6465fead9 Version bump: 11.0.6rc1. 2019-10-31 19:40:08 +01:00
hackademix b7c093a8d7 Version bump: 11.0.5. 2019-10-31 17:40:47 +01:00
hackademix 9a0202d49a Use pseudo-sync messaging to fetch policies for non-HTTP page loads only. 2019-10-31 17:33:23 +01:00
hackademix 7e85f22d58 Version bump: 11.0.5rc3. 2019-10-31 13:37:06 +01:00
hackademix 54c24a5405 On Chrome limit SyncMessage usage to non-HTTP urls. 2019-10-31 00:14:26 +01:00
hackademix 4da9a3d4fb Version bump: 11.0.5rc2. 2019-10-31 00:01:02 +01:00
hackademix adfb29f581 Use semi-synchronous mode to fetch policies. 2019-10-30 23:37:55 +01:00
hackademix 17ebef5a48 Semi-synchronous mode to avoid HEAD element insertion issues causing some userscripts to fail. 2019-10-30 23:37:30 +01:00
hackademix c913c2151b Version bump: 11.0.5rc1. 2019-10-30 17:05:20 +01:00
hackademix 08e108227d Version bump: 11.0.4. 2019-10-27 22:20:03 +00:00
hackademix ad5f6b1786 [Tor] Treat .onion sites whose protocol is HTTP as if it was HTTPS. 2019-10-27 22:05:35 +00:00
hackademix b1733d4392 - Use this refence instead of global ns property. 2019-10-27 22:05:35 +00:00
hackademix bb64b759b1 Version bump: 11.0.4rc15. 2019-10-27 14:16:44 +00:00
hackademix afe71bb7a4 More precise and verbose fallbacks for policy retrieval timing issues. 2019-10-25 23:19:48 +01:00
hackademix d84ff782c2 [Mobile] Blocked scripts count displayed in the browser action menu item. 2019-10-25 23:19:48 +01:00
hackademix 810c607e6b Consolidated missing endpoint error detection in Messages. 2019-10-25 23:19:48 +01:00
hackademix 51e115d3bc Cleaner and tighter usage of SyncMessage to fetch policies. 2019-10-25 23:19:48 +01:00
hackademix 7f4c3450fd Fixed bug in chunked storage causing shrunk items not to be retrieved correctly. 2019-10-25 23:19:48 +01:00
hackademix d196982cd5 Use asyncrhonous messages to deliver SyncMessage payloads on Firefox. 2019-10-25 23:19:48 +01:00
hackademix 534ab54c28 More compatible Messages abstraction. 2019-10-25 23:19:48 +01:00
hackademix 384b4b7423 Progressive count of debug messages to better trace asynchronous execution. 2019-10-25 23:19:48 +01:00
hackademix c1b3922de1 Fixed false positive (property assignment). 2019-10-25 23:19:48 +01:00
hackademix 440232d45c Version bump: 11.0.4rc14. 2019-10-22 09:48:39 +02:00
hackademix 314784079c More robust SyncMessage implementation coping with XHR suspension inconsistencies on Firefox. 2019-10-19 19:55:26 +02:00
hackademix 726392f5ee Version bump: 11.0.4rc13. 2019-10-19 19:54:15 +02:00
hackademix 2c708d6a13 [L10n] Updated nl. 2019-10-19 00:54:50 +02:00
hackademix 1b7690538c Policy fetching asynchronous only before initialization. 2019-10-18 22:46:01 +02:00
hackademix 1ead91d2aa Support for safe asynchronous page loading without fallback reloads. 2019-10-18 22:43:08 +02:00
hackademix 1e88b30a20 Fixed asynchronous onSyncMessage listeners support, on Chromium too. 2019-10-18 22:40:55 +02:00
hackademix 260291e07f Fixed typo causing initializing promise not being cached. 2019-10-18 10:51:44 +02:00
hackademix f1cf5d9535 Avoid unnecessary page reloads on extension updates. 2019-10-18 10:49:16 +02:00
hackademix 2c8ac802ea Fixed undefined variable error when in debugging mode. 2019-10-17 22:27:58 +02:00
hackademix ca87f093cb Version bump: 11.0.4rc12. 2019-10-10 17:18:44 +02:00
hackademix 98269dc4b0 [Tor] Display .onion sites as "secure" in the UI (tickets #27313 and #27307). 2019-10-09 14:59:19 +02:00
hackademix 518b8eda60 Version bump: 11.0.4rc11. 2019-10-09 12:45:40 +02:00
hackademix 9769846552 Support for splitting sync storage items into chunks, to allow synchronization of big policies across devices. 2019-10-08 11:21:43 +02:00
hackademix 2335141590 [L10n] Updated ca, nl. 2019-10-08 11:21:43 +02:00
hackademix 0995fb8dc1 Version bump: 11.0.4rc10. 2019-10-06 21:23:20 +02:00
hackademix 5ee30535c4 IPv4 subnet shortcut matching. 2019-10-05 15:45:56 +02:00
hackademix 9e951a378c Version bump: 11.0.4rc9. 2019-10-05 15:14:33 +02:00
hackademix c2ea02fd24 Fallback to local storage for any item exceeding limits (fixes persistence problems on Chromium). 2019-10-05 10:59:07 +02:00
hackademix 8a116734f8 [L10n] Updated nl. 2019-10-05 10:59:07 +02:00
hackademix ec9eb9b3fa Version bump: 11.0.4rc8. 2019-10-05 00:52:20 +02:00
hackademix 3547c44495 Prevent startup tabs to remain stuck with about:blank. 2019-10-02 00:35:15 +02:00
hackademix a78117ff24 Version bump: 11.0.4rc7. 2019-10-02 00:34:33 +02:00
hackademix 1c23d736a0 Prevent startup race conditions breaking pinned tabs sometimes. 2019-10-02 00:22:37 +02:00
hackademix eb4f87d660 Version bump: 11.0.4rc6. 2019-10-02 00:18:16 +02:00
hackademix 8621a36fa1 Make extra efforts to ensure safety net reloads happen only once on startup. 2019-10-02 00:02:01 +02:00
hackademix 1b3a02659e Version bump: 11.0.4rc5. 2019-10-01 23:42:17 +02:00
hackademix 242a3a1717 Improved console reporting. 2019-10-01 22:48:33 +02:00
hackademix 958bfba66c SyncMessage support for asynchronous listeners. 2019-10-01 22:47:19 +02:00
hackademix 0940fc84b3 "use strict" in SyncMessage.js 2019-10-01 22:41:39 +02:00
hackademix caa16365c1 Simplified, less noisy and more resilient Messages abstraction implementation. 2019-10-01 22:39:49 +02:00
hackademix e3c09d4dc0 Handle edge-case policy retrieval for file:// pages loaded by session restore on startup and alike. 2019-10-01 22:37:28 +02:00
hackademix 11e9e094c0 Version bump: 11.0.4rc4. 2019-09-30 21:18:11 +02:00
hackademix f0f6585314 Make policy fetching resilient to missing tab information. 2019-09-30 08:47:36 +02:00
hackademix 54dc58393a More verbose error logging while processing syncMessage listeners. 2019-09-30 08:44:43 +02:00
hackademix f9f116e65c Fix CSP violation reporting management of "fake" blocked-uri like "eval". 2019-09-30 07:37:03 +02:00
hackademix 6c60ab2710 Leaner and faster SyncMessage shim tab id tracking hack for Firefox. 2019-09-30 07:37:03 +02:00
hackademix 9632791d29 Version bump: 11.0.4rc3. 2019-09-30 07:37:03 +02:00
hackademix 9e4c03060a Recursive webgl context monkeypatching across same origin windows (concept/patch by skriptimaahinen). 2019-09-29 17:29:38 +02:00
hackademix fcd7c4aef0 Replace cookie-based hacks with synchronous messaging (currently shimmed) to retrieve fallback and per-tab restriction policies. 2019-09-29 17:29:38 +02:00
hackademix c3dcf300a6 Work-around for Chromium not supporting frameAncestors in webRequest. 2019-09-29 17:29:38 +02:00
hackademix 78063f3412 Remove ChildPolicies and its dependencies. 2019-09-29 17:29:38 +02:00
hackademix c9e06983ba Add browser.runtime.(sendSyncMessage|onSyncMessage) shim. 2019-09-29 17:29:38 +02:00
hackademix c52568837e Removed dead tab permissions management code. 2019-09-29 17:29:38 +02:00
hackademix 3bf8e29a9a Block CSP violation reports requests synchronously, before they fail on .invalid DNS resolution, on Chromium. 2019-09-29 17:29:38 +02:00
hackademix c245237c96 Fix typo "breaking" yet to be implemented contextual permissions. 2019-09-29 17:29:38 +02:00
hackademix 6208e7dbb3 Version bump: 11.0.4rc2. 2019-09-26 23:36:12 +02:00
hackademix 5517351652 [L10n] Updated Transifex-managed locales da, it, nl, ru, sv_SE. 2019-09-26 17:35:14 +02:00
hackademix e5ee60804b [XSS] Updated HTML5 events. 2019-09-26 17:33:59 +02:00
hackademix 0d680f91e3 Updated TLDs. 2019-09-26 17:33:22 +02:00
hackademix db4a5cb502 Fixed "Cascade top document restrictions" option not always applied to embedded elements. 2019-09-26 16:40:08 +02:00
hackademix deb108761d Removed XSS prompt for timeouts. 2019-09-24 11:38:47 +02:00
hackademix da1fdcb173 Version bump: 11.0.4rc1. 2019-09-24 11:35:44 +02:00
hackademix 824708c958 Version bump: 11.0.3. 2019-08-19 16:44:27 +02:00
hackademix cb599862bc Update TLDs. 2019-08-19 16:40:19 +02:00
hackademix 080117c7eb Update Transifex-managed locales he, is, nb, ru, sq, zh_TW. 2019-08-19 16:39:37 +02:00
hackademix bc97ff98f9 Version bump: 11.0.3rc3. 2019-08-19 16:38:11 +02:00
hackademix b56061943c [Tor] Work-around for prompts being huge when resistFingerprinting is enabled. 2019-08-02 19:13:26 +02:00
hackademix e45dfdcf2f [XSS] Fix false positives due to overzealous HTML attribute checking. 2019-08-02 18:04:51 +02:00
hackademix 845b0ee7dd [XSS] Enable InjectionChecker logging when debugging mode is on. 2019-08-02 18:03:49 +02:00
hackademix 207bd159c5 Version bump: 11.0.3rc2. 2019-08-02 17:39:15 +02:00
hackademix 119ca9b637 Updated TLDs. 2019-07-31 19:15:30 +02:00
hackademix 125a1a2937 Work-around for browser.i18n.getMessage() API in content scripts giving away browser's real locale (Tor issue #31287). 2019-07-31 19:13:41 +02:00
hackademix 6ef9b4e232 Version bump: 11.0.3rc1. 2019-07-25 22:15:16 +02:00
hackademix 863f6cc48f Version bump: 11.0.2. 2019-07-25 20:26:16 +02:00
hackademix 7ac0f2eb36 Updated TLDs. 2019-07-25 15:20:41 +02:00
hackademix 2679fdfb34 Update Transifex-managed locales br, de, it, ms, nl, ru, tr. 2019-07-25 15:19:10 +02:00
hackademix 491736d5e7 Fix bug in browser type detection by content scripts. 2019-07-25 15:16:34 +02:00
hackademix cae465b19c Fix incorrect console reporting from paste sanitization. 2019-07-25 15:14:23 +02:00
hackademix 7aab9ae426 Fix paste sanitization bugs and make it work on drag and drop too. 2019-07-24 22:48:02 +02:00
hackademix 4a25cb7e12 Version bump: 11.0.2rc2. 2019-07-24 13:48:14 +02:00
hackademix a42f920830 Updated TLDs. 2019-07-23 18:19:30 +02:00
hackademix e7c1761f7c Restore "classic" pasted HTML sanitization feature (patch by barbaz with slight modifications). 2019-07-23 18:11:14 +02:00
hackademix 8f71c8f4d3 Add "Collapse blocked objects" option to the Blocked Objects prompt. 2019-07-23 18:11:14 +02:00
hackademix dc2cf89b3f Update childNode.parentNode.removeChild(childNode) pattern to childNode.remove(). 2019-07-23 18:11:14 +02:00
hackademix c7f053a622 Handle corner case when application/* content types should match "media" rather than "object". 2019-07-23 18:11:14 +02:00
hackademix 22393ac858 Handle replacement clicks even if a content placeholder is obstructed. 2019-07-23 18:11:14 +02:00
hackademix 081ffddda6 More graceful handling of chrome: origins. 2019-07-23 18:11:14 +02:00
hackademix 1a90574124 Tiny CSP optimization (per spec, http: implies https:). 2019-07-23 18:11:14 +02:00
hackademix 0d93b22324 Updated Transifex-managed nb, sv_SE and zh_CN locales. 2019-07-23 18:11:14 +02:00
hackademix c54dfbb742 Version bump: 11.0.2rc1. 2019-07-23 18:11:02 +02:00
hackademix c2bce462d2 Updated TLDs. 2019-06-30 08:22:35 +02:00
hackademix cf7364b744 Fixed toolbar drag and drop configuration not working on Chrome. 2019-06-30 08:21:56 +02:00
hackademix 995e5e95e6 Version bump: 11.0.1. 2019-06-30 08:18:44 +02:00
hackademix f4bc9dbe05 Version bump: 11.0. 2019-06-24 23:08:45 +02:00
hackademix 6797437404 [XSS] Fixed false positives with parameters named "src". 2019-06-24 22:43:14 +02:00
hackademix 875c5c95d1 Static and click-to-play placeholders. 2019-06-24 22:42:26 +02:00
hackademix 6fcf92fbb1 New Transifex-managed locales (da, is, pl, sq, zh_TW). 2019-06-24 19:31:40 +02:00
hackademix 5d24f36508 Updated sv_SE Transifex-managed locale. 2019-06-24 19:31:05 +02:00
hackademix cfd9ba740c Version bump: 11.0rc1. 2019-06-24 19:22:01 +02:00
hackademix fa264f8157 Version bump: 10.6.3. 2019-06-15 22:41:20 +02:00
hackademix 4491d2f81b Updated TLDs. 2019-06-15 20:59:00 +02:00
hackademix 48d03247ff Fixed media replacement broken when <source> elements are used. 2019-06-15 20:42:39 +02:00
hackademix a4f088211e Fixed regression in full embedding document replacement due to timing changes. 2019-06-15 20:41:26 +02:00
hackademix 04baf1a3f8 Version bump: 10.6.3rc8. 2019-06-15 17:52:18 +02:00
hackademix fba660149e Further work-around for setting importation file picking inconsistencies on Android. 2019-05-30 13:23:35 +02:00
hackademix 18c0cdc590 Updated TLDs. 2019-05-30 12:52:35 +02:00
hackademix 9a44bf8900 Version bump: 10.6.3rc7. 2019-05-30 09:40:26 +02:00
hackademix fc72add8a9 Fixed [Import] button on Android (issue #76). 2019-05-28 23:32:19 +02:00
hackademix b89b161d9b Version bump: 10.6.3rc6. 2019-05-28 23:16:10 +02:00
hackademix 22bceb6c97 Further JSON reduction optimizations. 2019-05-28 16:48:58 +02:00
hackademix b935c22f55 Version bump: 10.6.3rc5. 2019-05-28 16:48:30 +02:00
hackademix cd44c749f4 Timing cap inferenced by call numbers when using low-resolution timers. 2019-05-28 01:35:44 +02:00
hackademix 4d4fa3c6ed Make XSS timeouts fatal and reported. 2019-05-28 01:35:44 +02:00
hackademix 37d148e3af Fixed JSON parsing preamble regression. 2019-05-28 01:35:44 +02:00
hackademix c2f0ce0dfc Version bump: 10.6.3rc4. 2019-05-28 01:35:44 +02:00
hackademix 5597c4b0e5 XSS Filter made further asynchronous, prevents freezes on complex JSON payloads. 2019-05-27 00:28:01 +02:00
hackademix 4826128e43 Version bump: 10.6.3rc3. 2019-05-27 00:27:51 +02:00
hackademix 23fb55bf38 More accurate algorithm to account for permissions changes in the UI triggering automatic reloads. 2019-05-26 15:42:00 +02:00
hackademix b06ec5d1c8 Version bump: 10.6.3rc2. 2019-05-26 15:40:41 +02:00
hackademix 947a2684af Updated TLDs. 2019-05-26 00:13:52 +02:00
hackademix 78a5600d47 Skip page autoreloads on transitions between temporary and permanent presets of the same kind. 2019-05-26 00:07:55 +02:00
hackademix f11d4243bc Version bump: 10.6.3rc1. 2019-05-26 00:05:07 +02:00
hackademix 5c44687f18 Version bump: 10.6.2. 2019-05-22 18:54:48 +02:00
hackademix 3f48f4d5a0 Updated InjectionChecker's HTML5 events. 2019-05-22 18:45:58 +02:00
hackademix 0eb42450d4 Removed work-around for https://bugzilla.mozilla.org/show_bug.cgi?id=1532530 (see https://trac.torproject.org/projects/tor/ticket/29969#comment:9). 2019-05-22 18:45:34 +02:00
hackademix c84673b110 Removed legacy DomNode.replaceChild() usage. 2019-05-22 16:59:18 +02:00
hackademix 732ba767a6 Version bump: 10.6.2rc2. 2019-05-22 16:58:11 +02:00
hackademix c2be460915 Fix mozwebext class added to content pages (Issue #80). 2019-05-06 12:11:31 +02:00
hackademix 7b35acdab0 Updated TLDs. 2019-04-29 15:38:17 +02:00
hackademix d0bcf7c975 Updated Transifex-managed locales (es, ms, tr). 2019-04-29 15:37:58 +02:00
hackademix 4fa4e55b62 Skip MediaSource patching where it's disabled by browser settings. 2019-04-29 10:31:19 +02:00
hackademix 43770cbc85 Skip dev-mode XSS tests unless the browser is Firefox. 2019-04-29 09:45:59 +02:00
hackademix 0c2df08d78 Reference internal pages as absolute URLs for Chromium compatibility. 2019-04-29 09:43:14 +02:00
hackademix 225ce1e6c8 Version bump: 10.6.2rc1. 2019-04-29 09:41:44 +02:00
hackademix 8aab462b44 Version bump: 10.6.1. 2019-04-08 23:21:40 +02:00
hackademix cf6ef3bed5 Updated Transifex-managed nl locale. 2019-04-08 15:51:32 +02:00
hackademix 7ab201e133 Catch SecurityException thrown on cross-origin wrappedJSObject access. 2019-04-08 15:46:52 +02:00
hackademix a489c192d6 Make RequestGuard's header processing synchronous on non-supporting browsers. 2019-04-08 13:08:17 +02:00
hackademix 5ffd53ee89 Fixed inconsistencies in handling of browser-internal URLs. 2019-04-08 11:44:08 +02:00
hackademix 9493978473 Fixed resetting options works just once per session (defaults reference current settings) - issue #69. 2019-04-06 10:49:57 +02:00