hackademix
|
cf7364b744
|
Fixed toolbar drag and drop configuration not working on Chrome.
|
2019-06-30 08:21:56 +02:00 |
hackademix
|
995e5e95e6
|
Version bump: 11.0.1.
|
2019-06-30 08:18:44 +02:00 |
hackademix
|
f4bc9dbe05
|
Version bump: 11.0.
|
2019-06-24 23:08:45 +02:00 |
hackademix
|
6797437404
|
[XSS] Fixed false positives with parameters named "src".
|
2019-06-24 22:43:14 +02:00 |
hackademix
|
875c5c95d1
|
Static and click-to-play placeholders.
|
2019-06-24 22:42:26 +02:00 |
hackademix
|
6fcf92fbb1
|
New Transifex-managed locales (da, is, pl, sq, zh_TW).
|
2019-06-24 19:31:40 +02:00 |
hackademix
|
5d24f36508
|
Updated sv_SE Transifex-managed locale.
|
2019-06-24 19:31:05 +02:00 |
hackademix
|
cfd9ba740c
|
Version bump: 11.0rc1.
|
2019-06-24 19:22:01 +02:00 |
hackademix
|
fa264f8157
|
Version bump: 10.6.3.
|
2019-06-15 22:41:20 +02:00 |
hackademix
|
4491d2f81b
|
Updated TLDs.
|
2019-06-15 20:59:00 +02:00 |
hackademix
|
48d03247ff
|
Fixed media replacement broken when <source> elements are used.
|
2019-06-15 20:42:39 +02:00 |
hackademix
|
a4f088211e
|
Fixed regression in full embedding document replacement due to timing changes.
|
2019-06-15 20:41:26 +02:00 |
hackademix
|
04baf1a3f8
|
Version bump: 10.6.3rc8.
|
2019-06-15 17:52:18 +02:00 |
hackademix
|
fba660149e
|
Further work-around for setting importation file picking inconsistencies on Android.
|
2019-05-30 13:23:35 +02:00 |
hackademix
|
18c0cdc590
|
Updated TLDs.
|
2019-05-30 12:52:35 +02:00 |
hackademix
|
9a44bf8900
|
Version bump: 10.6.3rc7.
|
2019-05-30 09:40:26 +02:00 |
hackademix
|
fc72add8a9
|
Fixed [Import] button on Android (issue #76).
|
2019-05-28 23:32:19 +02:00 |
hackademix
|
b89b161d9b
|
Version bump: 10.6.3rc6.
|
2019-05-28 23:16:10 +02:00 |
hackademix
|
22bceb6c97
|
Further JSON reduction optimizations.
|
2019-05-28 16:48:58 +02:00 |
hackademix
|
b935c22f55
|
Version bump: 10.6.3rc5.
|
2019-05-28 16:48:30 +02:00 |
hackademix
|
cd44c749f4
|
Timing cap inferenced by call numbers when using low-resolution timers.
|
2019-05-28 01:35:44 +02:00 |
hackademix
|
4d4fa3c6ed
|
Make XSS timeouts fatal and reported.
|
2019-05-28 01:35:44 +02:00 |
hackademix
|
37d148e3af
|
Fixed JSON parsing preamble regression.
|
2019-05-28 01:35:44 +02:00 |
hackademix
|
c2f0ce0dfc
|
Version bump: 10.6.3rc4.
|
2019-05-28 01:35:44 +02:00 |
hackademix
|
5597c4b0e5
|
XSS Filter made further asynchronous, prevents freezes on complex JSON payloads.
|
2019-05-27 00:28:01 +02:00 |
hackademix
|
4826128e43
|
Version bump: 10.6.3rc3.
|
2019-05-27 00:27:51 +02:00 |
hackademix
|
23fb55bf38
|
More accurate algorithm to account for permissions changes in the UI triggering automatic reloads.
|
2019-05-26 15:42:00 +02:00 |
hackademix
|
b06ec5d1c8
|
Version bump: 10.6.3rc2.
|
2019-05-26 15:40:41 +02:00 |
hackademix
|
947a2684af
|
Updated TLDs.
|
2019-05-26 00:13:52 +02:00 |
hackademix
|
78a5600d47
|
Skip page autoreloads on transitions between temporary and permanent presets of the same kind.
|
2019-05-26 00:07:55 +02:00 |
hackademix
|
f11d4243bc
|
Version bump: 10.6.3rc1.
|
2019-05-26 00:05:07 +02:00 |
hackademix
|
5c44687f18
|
Version bump: 10.6.2.
|
2019-05-22 18:54:48 +02:00 |
hackademix
|
3f48f4d5a0
|
Updated InjectionChecker's HTML5 events.
|
2019-05-22 18:45:58 +02:00 |
hackademix
|
0eb42450d4
|
Removed work-around for https://bugzilla.mozilla.org/show_bug.cgi?id=1532530 (see https://trac.torproject.org/projects/tor/ticket/29969#comment:9).
|
2019-05-22 18:45:34 +02:00 |
hackademix
|
c84673b110
|
Removed legacy DomNode.replaceChild() usage.
|
2019-05-22 16:59:18 +02:00 |
hackademix
|
732ba767a6
|
Version bump: 10.6.2rc2.
|
2019-05-22 16:58:11 +02:00 |
hackademix
|
c2be460915
|
Fix mozwebext class added to content pages (Issue #80).
|
2019-05-06 12:11:31 +02:00 |
hackademix
|
7b35acdab0
|
Updated TLDs.
|
2019-04-29 15:38:17 +02:00 |
hackademix
|
d0bcf7c975
|
Updated Transifex-managed locales (es, ms, tr).
|
2019-04-29 15:37:58 +02:00 |
hackademix
|
4fa4e55b62
|
Skip MediaSource patching where it's disabled by browser settings.
|
2019-04-29 10:31:19 +02:00 |
hackademix
|
43770cbc85
|
Skip dev-mode XSS tests unless the browser is Firefox.
|
2019-04-29 09:45:59 +02:00 |
hackademix
|
0c2df08d78
|
Reference internal pages as absolute URLs for Chromium compatibility.
|
2019-04-29 09:43:14 +02:00 |
hackademix
|
225ce1e6c8
|
Version bump: 10.6.2rc1.
|
2019-04-29 09:41:44 +02:00 |
hackademix
|
8aab462b44
|
Version bump: 10.6.1.
|
2019-04-08 23:21:40 +02:00 |
hackademix
|
cf6ef3bed5
|
Updated Transifex-managed nl locale.
|
2019-04-08 15:51:32 +02:00 |
hackademix
|
7ab201e133
|
Catch SecurityException thrown on cross-origin wrappedJSObject access.
|
2019-04-08 15:46:52 +02:00 |
hackademix
|
a489c192d6
|
Make RequestGuard's header processing synchronous on non-supporting browsers.
|
2019-04-08 13:08:17 +02:00 |
hackademix
|
5ffd53ee89
|
Fixed inconsistencies in handling of browser-internal URLs.
|
2019-04-08 11:44:08 +02:00 |
hackademix
|
9493978473
|
Fixed resetting options works just once per session (defaults reference current settings) - issue #69.
|
2019-04-06 10:49:57 +02:00 |
hackademix
|
db85a7cb01
|
Updated Transifex-managed locales (de, fr, it, tr).
|
2019-04-06 10:42:04 +02:00 |
hackademix
|
bd38efde03
|
Version bump: 10.6.1rc1.
|
2019-04-01 23:20:35 +02:00 |
hackademix
|
7754ad0f45
|
Version bump: 10.6.
|
2019-04-01 21:53:54 +02:00 |
hackademix
|
aadde8b693
|
Version bump: 10.6rc2.
|
2019-04-01 19:12:54 +02:00 |
hackademix
|
f145e625e4
|
Limit wrappedJSObject usages to compatible browsers.
|
2019-04-01 19:12:20 +02:00 |
hackademix
|
688f7a31fa
|
Version bump: 10.6rc1.
|
2019-04-01 13:20:54 +02:00 |
hackademix
|
76c959ec30
|
Updated TLDs.
|
2019-04-01 12:52:44 +02:00 |
hackademix
|
68a06fa546
|
Updated de, fr, he, ru locales.
|
2019-04-01 12:46:54 +02:00 |
hackademix
|
661a2a436b
|
Chromium-compatible popup closure handling.
|
2019-03-28 13:04:36 +01:00 |
hackademix
|
c806c6bbff
|
Work-around for potential issues with legacy prefs.
|
2019-03-28 13:04:36 +01:00 |
hackademix
|
5327505fba
|
Chromium-compatible version number.
|
2019-03-28 13:04:36 +01:00 |
hackademix
|
75ea681b9f
|
Remove source map reference because of https://bugzilla.mozilla.org/show_bug.cgi?id=1437937
|
2019-03-28 13:04:36 +01:00 |
hackademix
|
c003a5123a
|
Fixed manifest description for cross-browser and chrome web store usage.
|
2019-03-28 13:04:05 +01:00 |
hackademix
|
b9373c65b1
|
Merge branch 'chromium' into merge/chromium
|
2019-03-27 23:43:34 +01:00 |
hackademix
|
d77df5c9e4
|
Version bump: 10.2.5.
|
2019-03-24 23:55:06 +01:00 |
hackademix
|
d299436a08
|
Better detection of privileged URLs in the XSS filter.
|
2019-03-24 23:35:05 +01:00 |
hackademix
|
b825935788
|
Version bump: 10.2.5rc1.
|
2019-03-24 23:06:50 +01:00 |
hackademix
|
c2ec91f7a6
|
Version bump: 10.2.4.
|
2019-03-20 23:46:25 +01:00 |
hackademix
|
4f95364bbf
|
Improved prompts layout.
|
2019-03-20 23:42:10 +01:00 |
hackademix
|
169d5f085a
|
Improved unscanned POST blocking.
|
2019-03-20 23:34:32 +01:00 |
hackademix
|
cab9d0ea74
|
Version bump: 10.2.4rc1.
|
2019-03-20 23:32:46 +01:00 |
hackademix
|
8c8dc258eb
|
Version bump: 10.2.3.
|
2019-03-19 23:23:56 +01:00 |
hackademix
|
3bb748fda2
|
Version bump: 10.2.3rc3.
|
2019-03-19 23:19:25 +01:00 |
hackademix
|
57b222c48b
|
Updated Transifex-managed locales.
|
2019-03-19 23:19:10 +01:00 |
hackademix
|
fa623fe400
|
Fixed searches from the url bar causing XSS warnings in the Tor Browser.
|
2019-03-19 23:11:18 +01:00 |
hackademix
|
c505c3e999
|
Version bump: 10.2.3rc2.
|
2019-03-19 23:10:19 +01:00 |
hackademix
|
ea894393f1
|
Improved popup initialization perceived speed.
|
2019-03-19 13:46:58 +01:00 |
hackademix
|
f04fbd790e
|
Fixed popup top buttons not visible in high contrast appearance mode.
|
2019-03-19 13:46:19 +01:00 |
hackademix
|
0052e4b702
|
Version bump: 10.2.3rc1.
|
2019-03-19 13:42:09 +01:00 |
hackademix
|
ab65a0a423
|
Version bump: 10.2.2.
|
2019-03-17 23:21:20 +01:00 |
hackademix
|
84fc537101
|
Updated Transifex-managed locales.
|
2019-03-17 23:06:50 +01:00 |
hackademix
|
4f901eb1fa
|
Fixed ns.requestCan() using hardcoded "script" rather than its capability argument.
|
2019-03-16 15:48:55 +01:00 |
hackademix
|
19d41bcc4e
|
Version bump: 10.2.2rc5.
|
2019-03-16 15:47:30 +01:00 |
hackademix
|
921a7910f0
|
"General/Cascade top document's restrictions to subdocuments" option (default true on the Tor Browser).
|
2019-03-15 23:55:50 +01:00 |
hackademix
|
c3c3a6a769
|
Remove double quotes around property names for consistency.
|
2019-03-15 23:34:09 +01:00 |
hackademix
|
6edf62ca12
|
Version bump: 10.2.2rc4.
|
2019-03-15 23:02:50 +01:00 |
hackademix
|
e0a2e34d9a
|
Added "incognito" manifest.json key.
|
2019-03-14 02:07:45 +01:00 |
hackademix
|
d1dd278a81
|
Selective handling of Tor Browser options and work-around for https://bugzilla.mozilla.org/show_bug.cgi?id=1532530
|
2019-03-14 01:57:58 +01:00 |
hackademix
|
3f2453053b
|
Updated TLDs.
|
2019-03-14 00:22:43 +01:00 |
hackademix
|
3bb9699ec7
|
Updated event names handled by InjectionChecker.
|
2019-03-14 00:22:06 +01:00 |
hackademix
|
295d681c1b
|
Added missing await to async options saving.
|
2019-03-14 00:09:45 +01:00 |
hackademix
|
0878ad2b0a
|
Remove usage of non-standard Array methods.
|
2019-02-01 01:17:58 +01:00 |
hackademix
|
d152a53871
|
Removed non-standard uneval() usage.
|
2019-02-01 01:17:09 +01:00 |
hackademix
|
20b689d015
|
Fallback XSS filtering to XSS Auditor since asynchronous webRequest handlers are not supported by Chromium.
|
2019-02-01 01:16:33 +01:00 |
hackademix
|
2fa009673f
|
Conditional CSS toggle for non-mozilla browsers.
|
2019-02-01 01:13:26 +01:00 |
hackademix
|
9b5bd1c775
|
Chromium-compatible UI stylesheets.
|
2019-02-01 00:31:43 +01:00 |
hackademix
|
4e5f12a6c2
|
Differentiate Chromium restricted URLs (where extensions cannot operate).
|
2019-02-01 00:31:00 +01:00 |
hackademix
|
781514cfb9
|
Graceful degradation for missing WebExtensions APIs on Chromium.
|
2019-02-01 00:28:33 +01:00 |
hackademix
|
d076a517ba
|
Generic shims for Chromium derivatives.
|
2019-02-01 00:26:40 +01:00 |
hackademix
|
82313cc766
|
Version bump: 10.2.2rc3.
|
2018-12-31 00:21:04 +01:00 |
hackademix
|
c0956b20b9
|
Safer cookie-less check for unrestricted tabs from subdocuments.
|
2018-12-27 10:54:45 +01:00 |
hackademix
|
8493f63e25
|
Version bump: 10.2.2rc2.
|
2018-12-27 10:47:05 +01:00 |
hackademix
|
74f08a58d0
|
[Locale] Added sv_SE (by Jonatan Nyberg).
|
2018-12-27 00:16:45 +01:00 |
hackademix
|
357906df78
|
Fix for unrestricted tabs not affecting about:blank subframes (issue #48).
|
2018-12-26 23:44:36 +01:00 |
hackademix
|
f341217e0a
|
[XSS] Updated known HTML events lists.
|
2018-12-26 22:35:10 +01:00 |
hackademix
|
33447ef6c2
|
Version bump: 10.2.2rc1.
|
2018-12-25 23:30:07 +01:00 |
hackademix
|
35faebf81b
|
Version bump: 10.2.1.
|
2018-12-23 14:42:48 +01:00 |
hackademix
|
bbd050a174
|
Cascade top document's restrictions to subframes (Tor issue #28873).
|
2018-12-17 17:43:19 +01:00 |
hackademix
|
c3e803a7dc
|
Version bump: 10.2.1rc3.
|
2018-12-17 17:42:53 +01:00 |
hackademix
|
8f0bdc1493
|
Fix restored media element from placeholder not loading previously blocked content.
|
2018-12-06 22:51:53 +01:00 |
hackademix
|
07b9084829
|
Version bump: 10.2.1rc2.
|
2018-12-05 15:25:23 +01:00 |
hackademix
|
c94cd48752
|
Fixed placeholders missing for some blocked embeddings (Tor ticket #28720).
|
2018-12-05 10:10:26 +01:00 |
hackademix
|
68d0cd0568
|
Version bump: 10.2.1rc1.
|
2018-12-05 10:10:26 +01:00 |
hackademix
|
9e70392b90
|
Version bump: 10.2.0.
|
2018-11-25 23:40:39 +01:00 |
hackademix
|
e20acbcb99
|
Version bump: 10.2.
|
2018-11-25 23:34:11 +01:00 |
hackademix
|
82bed35e6c
|
Limit fix for issue #41 to origin-less fetch (exclude frames).
|
2018-11-25 23:00:08 +01:00 |
hackademix
|
d93c87954c
|
[L10n] Updated fr, he.
|
2018-11-25 19:19:16 +01:00 |
hackademix
|
5c5c06f0c3
|
Version bump: 10.2rc2.
|
2018-11-25 19:19:06 +01:00 |
hackademix
|
83979c532e
|
Allow extensions to perform origin-less fetching and framing (issue #41).
|
2018-11-24 23:43:32 +01:00 |
hackademix
|
1dcbc7ebfc
|
Fixed meta refresh inside <NOSCRIPT> emulation breaking Firefox's built-in refresh blocking.
|
2018-11-17 22:56:30 +01:00 |
hackademix
|
24f738337b
|
Fixed issue #35 "tabId is not defined" on startup.
|
2018-11-12 02:18:58 +01:00 |
hackademix
|
6860ee2a40
|
Darker red badge background to ensure text is kept white across browsers.
|
2018-10-26 01:36:11 +02:00 |
hackademix
|
c1f359ddf4
|
Version bump: 10.2rc1.
|
2018-10-26 01:34:51 +02:00 |
hackademix
|
9afc2e7f2b
|
Version bump: 10.1.9.9.
|
2018-10-16 13:24:50 +02:00 |
hackademix
|
f9703b2bcb
|
Fixed potential race condition in per-tab configuration cookie hack.
|
2018-10-14 23:18:31 +02:00 |
hackademix
|
e3dc784cd4
|
Version bump: 10.1.9.9rc2.
|
2018-10-14 23:18:23 +02:00 |
hackademix
|
808fd652be
|
Use cookie instead of window.name as a tab-configuration hack.
|
2018-10-13 10:08:37 +02:00 |
hackademix
|
e44fce3ebd
|
Set tab restrictions status across all frames.
|
2018-10-12 22:35:46 +02:00 |
hackademix
|
8c37d74a19
|
Version bump: 10.1.9.9rc1.
|
2018-10-12 22:21:23 +02:00 |
hackademix
|
ec997edc10
|
Version bump to 10.1.9.8 because of erronous self-hosting AMO signing.
|
2018-10-06 18:27:17 +02:00 |
hackademix
|
bb4660e89f
|
Version bump: 10.1.9.7.
|
2018-10-06 18:20:02 +02:00 |
hackademix
|
fc4ab21b2d
|
[L10n] Updated ru (thanks fatboy).
|
2018-10-06 18:13:27 +02:00 |
hackademix
|
209d50b0c1
|
Simplified CSP HTTP header injection, avoiding report-to until actually supported by browsers.
|
2018-10-06 18:13:27 +02:00 |
hackademix
|
c9c7b7aefe
|
Fixed preset customization UI showing inherited DEFAULT permissions if a protocol-level preset exists.
|
2018-10-06 18:13:19 +02:00 |
hackademix
|
4bd8da62b8
|
Version bump: 10.1.9.7rc3.
|
2018-10-06 12:28:26 +02:00 |
hackademix
|
55ccd14dfe
|
Better UX for overriding protocol-level permissions.
|
2018-10-06 02:11:49 +02:00 |
hackademix
|
ddbd70416c
|
[L10n] Updated (es, ru) and new (el, he, ms, nb) locales from OTF's Localization Lab Transifex project.
|
2018-10-06 02:06:38 +02:00 |
hackademix
|
ffc0b0d8b0
|
Version bump: 10.1.9.7rc2.
|
2018-10-04 23:11:15 +02:00 |
Allan Nordhøy
|
f9a05c7361
|
Norwegian Bokmål translation
|
2018-10-03 14:21:15 +02:00 |
hackademix
|
321401f60e
|
[XSS] Updated HTML5 events matching.
|
2018-09-26 17:42:07 +02:00 |
hackademix
|
92eed7d700
|
FTP directory UI emulation on script-disabled domains.
|
2018-09-26 17:19:44 +02:00 |
hackademix
|
8b36446fc9
|
Include ftp:// URLs in non-secure domain matching.
|
2018-09-26 16:52:06 +02:00 |
hackademix
|
f4055263c7
|
Version bump: 10.1.9.7rc1.
|
2018-09-26 15:59:36 +02:00 |
hackademix
|
e4e1c83f2c
|
Fixed line endings.
|
2018-09-15 22:11:31 +02:00 |
hackademix
|
297fec781f
|
Version bump: 10.1.9.6.
|
2018-09-14 07:36:13 +02:00 |
hackademix
|
98528299cd
|
[XSS] Updated known HTML5 events.
|
2018-09-14 07:21:22 +02:00 |
hackademix
|
fcb9fb8452
|
Version bump: 10.1.9.6rc3.
|
2018-09-14 07:19:03 +02:00 |
hackademix
|
71c82b5084
|
Gracefully handle legacy message recipients.
|
2018-09-14 07:18:10 +02:00 |
hackademix
|
8c739b064c
|
Removed unused regexp.
|
2018-09-10 19:23:47 +02:00 |
hackademix
|
48053d96d4
|
Better IPV6 support.
|
2018-09-10 19:10:32 +02:00 |
hackademix
|
2b45fcb9a4
|
Version bump: 10.1.9.6rc2.
|
2018-09-10 19:09:46 +02:00 |