Commit Graph

459 Commits

Author SHA1 Message Date
hackademix cf7364b744 Fixed toolbar drag and drop configuration not working on Chrome. 2019-06-30 08:21:56 +02:00
hackademix 995e5e95e6 Version bump: 11.0.1. 2019-06-30 08:18:44 +02:00
hackademix f4bc9dbe05 Version bump: 11.0. 2019-06-24 23:08:45 +02:00
hackademix 6797437404 [XSS] Fixed false positives with parameters named "src". 2019-06-24 22:43:14 +02:00
hackademix 875c5c95d1 Static and click-to-play placeholders. 2019-06-24 22:42:26 +02:00
hackademix 6fcf92fbb1 New Transifex-managed locales (da, is, pl, sq, zh_TW). 2019-06-24 19:31:40 +02:00
hackademix 5d24f36508 Updated sv_SE Transifex-managed locale. 2019-06-24 19:31:05 +02:00
hackademix cfd9ba740c Version bump: 11.0rc1. 2019-06-24 19:22:01 +02:00
hackademix fa264f8157 Version bump: 10.6.3. 2019-06-15 22:41:20 +02:00
hackademix 4491d2f81b Updated TLDs. 2019-06-15 20:59:00 +02:00
hackademix 48d03247ff Fixed media replacement broken when <source> elements are used. 2019-06-15 20:42:39 +02:00
hackademix a4f088211e Fixed regression in full embedding document replacement due to timing changes. 2019-06-15 20:41:26 +02:00
hackademix 04baf1a3f8 Version bump: 10.6.3rc8. 2019-06-15 17:52:18 +02:00
hackademix fba660149e Further work-around for setting importation file picking inconsistencies on Android. 2019-05-30 13:23:35 +02:00
hackademix 18c0cdc590 Updated TLDs. 2019-05-30 12:52:35 +02:00
hackademix 9a44bf8900 Version bump: 10.6.3rc7. 2019-05-30 09:40:26 +02:00
hackademix fc72add8a9 Fixed [Import] button on Android (issue #76). 2019-05-28 23:32:19 +02:00
hackademix b89b161d9b Version bump: 10.6.3rc6. 2019-05-28 23:16:10 +02:00
hackademix 22bceb6c97 Further JSON reduction optimizations. 2019-05-28 16:48:58 +02:00
hackademix b935c22f55 Version bump: 10.6.3rc5. 2019-05-28 16:48:30 +02:00
hackademix cd44c749f4 Timing cap inferenced by call numbers when using low-resolution timers. 2019-05-28 01:35:44 +02:00
hackademix 4d4fa3c6ed Make XSS timeouts fatal and reported. 2019-05-28 01:35:44 +02:00
hackademix 37d148e3af Fixed JSON parsing preamble regression. 2019-05-28 01:35:44 +02:00
hackademix c2f0ce0dfc Version bump: 10.6.3rc4. 2019-05-28 01:35:44 +02:00
hackademix 5597c4b0e5 XSS Filter made further asynchronous, prevents freezes on complex JSON payloads. 2019-05-27 00:28:01 +02:00
hackademix 4826128e43 Version bump: 10.6.3rc3. 2019-05-27 00:27:51 +02:00
hackademix 23fb55bf38 More accurate algorithm to account for permissions changes in the UI triggering automatic reloads. 2019-05-26 15:42:00 +02:00
hackademix b06ec5d1c8 Version bump: 10.6.3rc2. 2019-05-26 15:40:41 +02:00
hackademix 947a2684af Updated TLDs. 2019-05-26 00:13:52 +02:00
hackademix 78a5600d47 Skip page autoreloads on transitions between temporary and permanent presets of the same kind. 2019-05-26 00:07:55 +02:00
hackademix f11d4243bc Version bump: 10.6.3rc1. 2019-05-26 00:05:07 +02:00
hackademix 5c44687f18 Version bump: 10.6.2. 2019-05-22 18:54:48 +02:00
hackademix 3f48f4d5a0 Updated InjectionChecker's HTML5 events. 2019-05-22 18:45:58 +02:00
hackademix 0eb42450d4 Removed work-around for https://bugzilla.mozilla.org/show_bug.cgi?id=1532530 (see https://trac.torproject.org/projects/tor/ticket/29969#comment:9). 2019-05-22 18:45:34 +02:00
hackademix c84673b110 Removed legacy DomNode.replaceChild() usage. 2019-05-22 16:59:18 +02:00
hackademix 732ba767a6 Version bump: 10.6.2rc2. 2019-05-22 16:58:11 +02:00
hackademix c2be460915 Fix mozwebext class added to content pages (Issue #80). 2019-05-06 12:11:31 +02:00
hackademix 7b35acdab0 Updated TLDs. 2019-04-29 15:38:17 +02:00
hackademix d0bcf7c975 Updated Transifex-managed locales (es, ms, tr). 2019-04-29 15:37:58 +02:00
hackademix 4fa4e55b62 Skip MediaSource patching where it's disabled by browser settings. 2019-04-29 10:31:19 +02:00
hackademix 43770cbc85 Skip dev-mode XSS tests unless the browser is Firefox. 2019-04-29 09:45:59 +02:00
hackademix 0c2df08d78 Reference internal pages as absolute URLs for Chromium compatibility. 2019-04-29 09:43:14 +02:00
hackademix 225ce1e6c8 Version bump: 10.6.2rc1. 2019-04-29 09:41:44 +02:00
hackademix 8aab462b44 Version bump: 10.6.1. 2019-04-08 23:21:40 +02:00
hackademix cf6ef3bed5 Updated Transifex-managed nl locale. 2019-04-08 15:51:32 +02:00
hackademix 7ab201e133 Catch SecurityException thrown on cross-origin wrappedJSObject access. 2019-04-08 15:46:52 +02:00
hackademix a489c192d6 Make RequestGuard's header processing synchronous on non-supporting browsers. 2019-04-08 13:08:17 +02:00
hackademix 5ffd53ee89 Fixed inconsistencies in handling of browser-internal URLs. 2019-04-08 11:44:08 +02:00
hackademix 9493978473 Fixed resetting options works just once per session (defaults reference current settings) - issue #69. 2019-04-06 10:49:57 +02:00
hackademix db85a7cb01 Updated Transifex-managed locales (de, fr, it, tr). 2019-04-06 10:42:04 +02:00
hackademix bd38efde03 Version bump: 10.6.1rc1. 2019-04-01 23:20:35 +02:00
hackademix 7754ad0f45 Version bump: 10.6. 2019-04-01 21:53:54 +02:00
hackademix aadde8b693 Version bump: 10.6rc2. 2019-04-01 19:12:54 +02:00
hackademix f145e625e4 Limit wrappedJSObject usages to compatible browsers. 2019-04-01 19:12:20 +02:00
hackademix 688f7a31fa Version bump: 10.6rc1. 2019-04-01 13:20:54 +02:00
hackademix 76c959ec30 Updated TLDs. 2019-04-01 12:52:44 +02:00
hackademix 68a06fa546 Updated de, fr, he, ru locales. 2019-04-01 12:46:54 +02:00
hackademix 661a2a436b Chromium-compatible popup closure handling. 2019-03-28 13:04:36 +01:00
hackademix c806c6bbff Work-around for potential issues with legacy prefs. 2019-03-28 13:04:36 +01:00
hackademix 5327505fba Chromium-compatible version number. 2019-03-28 13:04:36 +01:00
hackademix 75ea681b9f Remove source map reference because of https://bugzilla.mozilla.org/show_bug.cgi?id=1437937 2019-03-28 13:04:36 +01:00
hackademix c003a5123a Fixed manifest description for cross-browser and chrome web store usage. 2019-03-28 13:04:05 +01:00
hackademix b9373c65b1 Merge branch 'chromium' into merge/chromium 2019-03-27 23:43:34 +01:00
hackademix d77df5c9e4 Version bump: 10.2.5. 2019-03-24 23:55:06 +01:00
hackademix d299436a08 Better detection of privileged URLs in the XSS filter. 2019-03-24 23:35:05 +01:00
hackademix b825935788 Version bump: 10.2.5rc1. 2019-03-24 23:06:50 +01:00
hackademix c2ec91f7a6 Version bump: 10.2.4. 2019-03-20 23:46:25 +01:00
hackademix 4f95364bbf Improved prompts layout. 2019-03-20 23:42:10 +01:00
hackademix 169d5f085a Improved unscanned POST blocking. 2019-03-20 23:34:32 +01:00
hackademix cab9d0ea74 Version bump: 10.2.4rc1. 2019-03-20 23:32:46 +01:00
hackademix 8c8dc258eb Version bump: 10.2.3. 2019-03-19 23:23:56 +01:00
hackademix 3bb748fda2 Version bump: 10.2.3rc3. 2019-03-19 23:19:25 +01:00
hackademix 57b222c48b Updated Transifex-managed locales. 2019-03-19 23:19:10 +01:00
hackademix fa623fe400 Fixed searches from the url bar causing XSS warnings in the Tor Browser. 2019-03-19 23:11:18 +01:00
hackademix c505c3e999 Version bump: 10.2.3rc2. 2019-03-19 23:10:19 +01:00
hackademix ea894393f1 Improved popup initialization perceived speed. 2019-03-19 13:46:58 +01:00
hackademix f04fbd790e Fixed popup top buttons not visible in high contrast appearance mode. 2019-03-19 13:46:19 +01:00
hackademix 0052e4b702 Version bump: 10.2.3rc1. 2019-03-19 13:42:09 +01:00
hackademix ab65a0a423 Version bump: 10.2.2. 2019-03-17 23:21:20 +01:00
hackademix 84fc537101 Updated Transifex-managed locales. 2019-03-17 23:06:50 +01:00
hackademix 4f901eb1fa Fixed ns.requestCan() using hardcoded "script" rather than its capability argument. 2019-03-16 15:48:55 +01:00
hackademix 19d41bcc4e Version bump: 10.2.2rc5. 2019-03-16 15:47:30 +01:00
hackademix 921a7910f0 "General/Cascade top document's restrictions to subdocuments" option (default true on the Tor Browser). 2019-03-15 23:55:50 +01:00
hackademix c3c3a6a769 Remove double quotes around property names for consistency. 2019-03-15 23:34:09 +01:00
hackademix 6edf62ca12 Version bump: 10.2.2rc4. 2019-03-15 23:02:50 +01:00
hackademix e0a2e34d9a Added "incognito" manifest.json key. 2019-03-14 02:07:45 +01:00
hackademix d1dd278a81 Selective handling of Tor Browser options and work-around for https://bugzilla.mozilla.org/show_bug.cgi?id=1532530 2019-03-14 01:57:58 +01:00
hackademix 3f2453053b Updated TLDs. 2019-03-14 00:22:43 +01:00
hackademix 3bb9699ec7 Updated event names handled by InjectionChecker. 2019-03-14 00:22:06 +01:00
hackademix 295d681c1b Added missing await to async options saving. 2019-03-14 00:09:45 +01:00
hackademix 0878ad2b0a Remove usage of non-standard Array methods. 2019-02-01 01:17:58 +01:00
hackademix d152a53871 Removed non-standard uneval() usage. 2019-02-01 01:17:09 +01:00
hackademix 20b689d015 Fallback XSS filtering to XSS Auditor since asynchronous webRequest handlers are not supported by Chromium. 2019-02-01 01:16:33 +01:00
hackademix 2fa009673f Conditional CSS toggle for non-mozilla browsers. 2019-02-01 01:13:26 +01:00
hackademix 9b5bd1c775 Chromium-compatible UI stylesheets. 2019-02-01 00:31:43 +01:00
hackademix 4e5f12a6c2 Differentiate Chromium restricted URLs (where extensions cannot operate). 2019-02-01 00:31:00 +01:00
hackademix 781514cfb9 Graceful degradation for missing WebExtensions APIs on Chromium. 2019-02-01 00:28:33 +01:00
hackademix d076a517ba Generic shims for Chromium derivatives. 2019-02-01 00:26:40 +01:00
hackademix 82313cc766 Version bump: 10.2.2rc3. 2018-12-31 00:21:04 +01:00
hackademix c0956b20b9 Safer cookie-less check for unrestricted tabs from subdocuments. 2018-12-27 10:54:45 +01:00
hackademix 8493f63e25 Version bump: 10.2.2rc2. 2018-12-27 10:47:05 +01:00
hackademix 74f08a58d0 [Locale] Added sv_SE (by Jonatan Nyberg). 2018-12-27 00:16:45 +01:00
hackademix 357906df78 Fix for unrestricted tabs not affecting about:blank subframes (issue #48). 2018-12-26 23:44:36 +01:00
hackademix f341217e0a [XSS] Updated known HTML events lists. 2018-12-26 22:35:10 +01:00
hackademix 33447ef6c2 Version bump: 10.2.2rc1. 2018-12-25 23:30:07 +01:00
hackademix 35faebf81b Version bump: 10.2.1. 2018-12-23 14:42:48 +01:00
hackademix bbd050a174 Cascade top document's restrictions to subframes (Tor issue #28873). 2018-12-17 17:43:19 +01:00
hackademix c3e803a7dc Version bump: 10.2.1rc3. 2018-12-17 17:42:53 +01:00
hackademix 8f0bdc1493 Fix restored media element from placeholder not loading previously blocked content. 2018-12-06 22:51:53 +01:00
hackademix 07b9084829 Version bump: 10.2.1rc2. 2018-12-05 15:25:23 +01:00
hackademix c94cd48752 Fixed placeholders missing for some blocked embeddings (Tor ticket #28720). 2018-12-05 10:10:26 +01:00
hackademix 68d0cd0568 Version bump: 10.2.1rc1. 2018-12-05 10:10:26 +01:00
hackademix 9e70392b90 Version bump: 10.2.0. 2018-11-25 23:40:39 +01:00
hackademix e20acbcb99 Version bump: 10.2. 2018-11-25 23:34:11 +01:00
hackademix 82bed35e6c Limit fix for issue #41 to origin-less fetch (exclude frames). 2018-11-25 23:00:08 +01:00
hackademix d93c87954c [L10n] Updated fr, he. 2018-11-25 19:19:16 +01:00
hackademix 5c5c06f0c3 Version bump: 10.2rc2. 2018-11-25 19:19:06 +01:00
hackademix 83979c532e Allow extensions to perform origin-less fetching and framing (issue #41). 2018-11-24 23:43:32 +01:00
hackademix 1dcbc7ebfc Fixed meta refresh inside <NOSCRIPT> emulation breaking Firefox's built-in refresh blocking. 2018-11-17 22:56:30 +01:00
hackademix 24f738337b Fixed issue #35 "tabId is not defined" on startup. 2018-11-12 02:18:58 +01:00
hackademix 6860ee2a40 Darker red badge background to ensure text is kept white across browsers. 2018-10-26 01:36:11 +02:00
hackademix c1f359ddf4 Version bump: 10.2rc1. 2018-10-26 01:34:51 +02:00
hackademix 9afc2e7f2b Version bump: 10.1.9.9. 2018-10-16 13:24:50 +02:00
hackademix f9703b2bcb Fixed potential race condition in per-tab configuration cookie hack. 2018-10-14 23:18:31 +02:00
hackademix e3dc784cd4 Version bump: 10.1.9.9rc2. 2018-10-14 23:18:23 +02:00
hackademix 808fd652be Use cookie instead of window.name as a tab-configuration hack. 2018-10-13 10:08:37 +02:00
hackademix e44fce3ebd Set tab restrictions status across all frames. 2018-10-12 22:35:46 +02:00
hackademix 8c37d74a19 Version bump: 10.1.9.9rc1. 2018-10-12 22:21:23 +02:00
hackademix ec997edc10 Version bump to 10.1.9.8 because of erronous self-hosting AMO signing. 2018-10-06 18:27:17 +02:00
hackademix bb4660e89f Version bump: 10.1.9.7. 2018-10-06 18:20:02 +02:00
hackademix fc4ab21b2d [L10n] Updated ru (thanks fatboy). 2018-10-06 18:13:27 +02:00
hackademix 209d50b0c1 Simplified CSP HTTP header injection, avoiding report-to until actually supported by browsers. 2018-10-06 18:13:27 +02:00
hackademix c9c7b7aefe Fixed preset customization UI showing inherited DEFAULT permissions if a protocol-level preset exists. 2018-10-06 18:13:19 +02:00
hackademix 4bd8da62b8 Version bump: 10.1.9.7rc3. 2018-10-06 12:28:26 +02:00
hackademix 55ccd14dfe Better UX for overriding protocol-level permissions. 2018-10-06 02:11:49 +02:00
hackademix ddbd70416c [L10n] Updated (es, ru) and new (el, he, ms, nb) locales from OTF's Localization Lab Transifex project. 2018-10-06 02:06:38 +02:00
hackademix ffc0b0d8b0 Version bump: 10.1.9.7rc2. 2018-10-04 23:11:15 +02:00
Allan Nordhøy f9a05c7361
Norwegian Bokmål translation 2018-10-03 14:21:15 +02:00
hackademix 321401f60e [XSS] Updated HTML5 events matching. 2018-09-26 17:42:07 +02:00
hackademix 92eed7d700 FTP directory UI emulation on script-disabled domains. 2018-09-26 17:19:44 +02:00
hackademix 8b36446fc9 Include ftp:// URLs in non-secure domain matching. 2018-09-26 16:52:06 +02:00
hackademix f4055263c7 Version bump: 10.1.9.7rc1. 2018-09-26 15:59:36 +02:00
hackademix e4e1c83f2c Fixed line endings. 2018-09-15 22:11:31 +02:00
hackademix 297fec781f Version bump: 10.1.9.6. 2018-09-14 07:36:13 +02:00
hackademix 98528299cd [XSS] Updated known HTML5 events. 2018-09-14 07:21:22 +02:00
hackademix fcb9fb8452 Version bump: 10.1.9.6rc3. 2018-09-14 07:19:03 +02:00
hackademix 71c82b5084 Gracefully handle legacy message recipients. 2018-09-14 07:18:10 +02:00
hackademix 8c739b064c Removed unused regexp. 2018-09-10 19:23:47 +02:00
hackademix 48053d96d4 Better IPV6 support. 2018-09-10 19:10:32 +02:00
hackademix 2b45fcb9a4 Version bump: 10.1.9.6rc2. 2018-09-10 19:09:46 +02:00