Commit Graph

1000 Commits

Author SHA1 Message Date
hackademix 43e79130b8 [L10n] Updated es. 2020-09-10 00:31:09 +02:00
hackademix 888a284f58 [XSS] Fixed escape detection bug causing strage false positives (thanks Dave Howorth for report). 2020-09-10 00:30:34 +02:00
hackademix b79067c745 Fixed markup typo. 2020-09-10 00:29:35 +02:00
hackademix 1de3349624 Version bump: 11.0.44rc1. 2020-09-10 00:01:53 +02:00
hackademix 45db064e0c Version bump: 11.0.43. 2020-09-08 20:23:30 +02:00
hackademix 9568584751 Should fix some race conditions causing corruptions in non-HTML non-XML documents. 2020-09-07 23:22:03 +02:00
hackademix e0f46a2874 Version bump: 11.0.43rc1. 2020-09-07 21:05:22 +02:00
hackademix 7482ba22ed Version bump: 11.0.42. 2020-09-04 23:42:42 +02:00
hackademix b66e0afde1 Avoid useless "seen" reports from onBeforeRequest(). 2020-09-04 20:26:19 +02:00
hackademix 658056878c Catch broadcast messaging errors. 2020-09-04 20:26:19 +02:00
hackademix eb3dbf9f4b Version bump: 11.0.42rc8. 2020-09-04 20:26:19 +02:00
hackademix 0ab900cd0a Updated TLDs. 2020-09-04 15:19:30 +02:00
hackademix 373db2b7f2 Let injected CSP prevent onload events from firing on unfrozen embedded elements. 2020-09-04 15:14:51 +02:00
hackademix 681d00ef84 Work-around for applying DOM CSP to non-HTML XML documents (thanks skriptimaahinen). 2020-09-04 15:14:51 +02:00
hackademix 52d97d29b8 Version bump: 11.0.42rc7. 2020-09-04 15:14:51 +02:00
hackademix 8518443e3d Document freezing to handle SVG and other XML documents impervious to CSP on Mozilla. 2020-09-03 16:52:17 +02:00
hackademix 1c76173df2 Version bump: 11.0.42rc6. 2020-09-02 09:16:28 +02:00
hackademix 1d583e17f4 Skip soft reload if not needed. 2020-09-01 00:56:17 +02:00
hackademix 93bca61c92 Version bump: 11.0.42rc5. 2020-09-01 00:55:39 +02:00
hackademix 59eda23302 XML-compatible soft reload. 2020-08-31 09:05:37 +02:00
hackademix 2e0ee1a2a7 Version bump: 11.0.42rc4. 2020-08-30 16:25:23 +02:00
hackademix 703d85f015 "Soft reload" approach to fix file: and ftp: issues. 2020-08-30 01:29:27 +02:00
hackademix f9d4e08047 Version bump: 11.0.42rc3. 2020-08-29 19:00:05 +02:00
hackademix d282a385ca SyncMessage suspending on DOMContentLoaded. 2020-08-29 08:18:48 +02:00
hackademix 4b3af158b9 Updated TLDs. 2020-08-29 08:14:12 +02:00
hackademix 485dcb09c4 Version bump: 11.0.42rc2. 2020-08-29 08:14:07 +02:00
hackademix 3922f234f4 Refactored and improved syncFetchPolicy fallback for file: and ftp: special cases. 2020-08-28 21:00:01 +02:00
hackademix 058bf1b206 Version bump: 11.0.42rc1. 2020-08-27 21:22:19 +02:00
hackademix d72db163ee Version bump: 11.0.41. 2020-08-25 01:06:39 +02:00
hackademix d4b210dfe9 More precise event suppression mechanism. 2020-08-25 00:49:37 +02:00
hackademix c07d194da6 Version bump: 11.0.41rc2. 2020-08-25 00:48:58 +02:00
hackademix c1f0ef098f Fixed regression: events suppressed on file:// pages unless scripts are allowed. 2020-08-24 18:28:47 +02:00
hackademix 721ab768d1 Updated TLDs. 2020-08-24 18:27:50 +02:00
hackademix 65bcaa82cb Version bump: 11.0.41rc1. 2020-08-24 13:37:49 +02:00
hackademix 34f12c4c0b Version bump: 11.0.40. 2020-08-23 23:59:40 +02:00
hackademix 267dd5eb5d Avoid synchronous policy fetching whenever possible. 2020-08-23 15:09:08 +02:00
hackademix 80f6c8c8bc Version bump: 11.0.40rc2. 2020-08-23 15:09:08 +02:00
hackademix 0b83220715 Handle edge case in file:// pages: policy change and reload before DOMContentLoaded. 2020-08-21 21:38:13 +02:00
hackademix 86b7b99018 Version bump: 11.0.40rc1. 2020-08-21 21:26:34 +02:00
hackademix 8cc629dec8 Version bump: 11.0.39. 2020-08-21 02:05:31 +02:00
hackademix 9bf46cf5b6 Several hacks to make non-distruptive updates compatible with Chromium. 2020-08-21 01:57:30 +02:00
hackademix a59da576a4 Tighten localPolicy persistence mechanism during reloads. 2020-08-20 19:46:42 +02:00
hackademix 810cab512b Version bump: 11.0.39rc8. 2020-08-20 19:46:42 +02:00
hackademix 7785661d97 Temporary settings survival more resilient and compatible with Fenix. 2020-08-20 15:56:52 +02:00
hackademix fa81d3791a [L10n] Updated es. 2020-08-20 12:39:05 +02:00
hackademix 72f9800e09 Version bump: 11.0.39rc7. 2020-08-20 08:06:06 +02:00
hackademix affe284193 Fix reload loops on broken file: HTML documents (thanks bernie for report). 2020-08-20 00:13:53 +02:00
hackademix a83cf372eb [XSS] Updated HTML event attributes. 2020-08-19 21:35:41 +02:00
hackademix 64876214e3 Version bump: 11.0.39rc6. 2020-08-19 21:35:23 +02:00
hackademix 7809f165de Local policy fallback for file: and ftp: URLs using window.name rather than sessionStorage. 2020-08-19 15:04:47 +02:00
hackademix 508479f26c [L10n] Updated bn, br, ca, da, de, el, es, fr, he, is, it, ja, lt, mk, ms, nb, nl, pl, pt_BR, ru, sq, sv_SE, tr, zh_CN, zh_TW. 2020-08-19 14:56:35 +02:00
hackademix e03d91d0b8 Renamed optionto "Revoke temporary permissions on NoScript updates, even if the browser is not restarted". 2020-08-18 20:24:04 +02:00
hackademix 59219eed0a Version bump: 11.0.39rc5. 2020-08-18 20:23:25 +02:00
hackademix 8e694a603c Added option to forget temporary settings immediately whenever NoScript gets updated. 2020-08-18 17:31:12 +02:00
hackademix 2905a6a543 Fixed regression: file:/// URLs reloaded whenever NoScript gets reinstalled / enabled / reloaded. 2020-08-18 17:31:12 +02:00
hackademix b38a561ac3 More resilient and easy to debug survival data retrieving. 2020-08-18 17:31:12 +02:00
hackademix 300cd0e675 Version bump: 11.0.39rc4. 2020-08-18 17:31:12 +02:00
hackademix 5ef6980d56 Fixed regression causing manual NoScript downgrades to be delayed until manual restart. 2020-08-18 12:47:07 +02:00
hackademix 2410d373ce Version bump: 11.0.39rc3. 2020-08-18 12:46:37 +02:00
hackademix 937fab04d2 Let temporary permissions survive NoScript updates (shameless hack). 2020-08-18 00:45:37 +02:00
hackademix 5c99ed053b Fixed some traps around Messages abstraction. 2020-08-18 00:45:37 +02:00
hackademix 2850f631b9 Ignore search / hash on policy matching of domain-less URLs (e.g. file:///...). 2020-08-18 00:45:37 +02:00
hackademix 3f8d2a0bad Removed useless CSS property. 2020-08-18 00:45:37 +02:00
hackademix 1bc51b5313 Updated TLDs. 2020-08-18 00:45:37 +02:00
hackademix 53356ab655 Version bump: 11.0.39rc2. 2020-08-15 17:46:05 +02:00
hackademix 495dfc8ba5 Updated TLDs. 2020-08-14 23:31:05 +02:00
hackademix d1b10a9bb1 Fixed automatic scrolling hampers usability on long sites lists in popup. 2020-08-14 22:32:44 +02:00
hackademix 40a33368fc Fixed typo in vendor-prefixed CSS. 2020-08-14 22:31:47 +02:00
hackademix b9124f4fcb Version bump: 11.0.39rc1. 2020-08-14 22:30:44 +02:00
hackademix 6fe89a4e46 Version bump: 11.0.38. 2020-08-13 12:45:00 +02:00
hackademix fb8fa90cb8 Better timing for event attributes removal/restore. 2020-08-13 09:27:09 +02:00
hackademix 06a4d2756e Version bump: 11.0.38rc2. 2020-08-13 08:48:46 +02:00
hackademix 1e36986795 Work-arounds for edge cases in synchronous page loads bypassing webRequest (thanks skriptimaahinen). 2020-08-13 00:32:03 +02:00
hackademix d4c2ab2c05 [L10n] Updated bn. 2020-08-10 23:58:46 +02:00
hackademix be08be9582 Version bump: 11.0.38rc1. 2020-08-10 23:58:18 +02:00
hackademix 5e867071c8 Version bump: 11.0.37. 2020-08-10 23:45:28 +02:00
hackademix 4cf7b231a7 Simpler and more reliable sendSyncMessage implementation and usage. 2020-08-10 23:12:00 +02:00
hackademix dcc779b1cf Updated TLDs. 2020-08-10 23:10:23 +02:00
hackademix d445c35663 Version bump: 11.0.37rc3. 2020-08-10 23:06:59 +02:00
hackademix 1fc18ed6a8 SyncMessage suspending on DOM modification as well. 2020-08-09 23:58:12 +02:00
hackademix 94d78ef404 Version bump: 11.0.37rc2. 2020-08-09 23:58:12 +02:00
hackademix a977563b88 sendSyncMessage support for multiple suspension requests (should fix extension script injection issues). 2020-08-08 09:27:15 +02:00
hackademix d56eb371a9 Version bump: 11.0.37rc1. 2020-08-07 23:26:42 +02:00
hackademix 5646ea9305 Version bump: 11.0.36. 2020-08-07 07:42:58 +02:00
hackademix ead6080759 Fixed regression: temporary permissions revocation not working anymore on privileged pages. 2020-08-07 00:09:45 +02:00
hackademix aaf5a3d0a6 SendSyncMessage script execution safety net more compatible with other extensions (e.g. BlockTube). 2020-08-07 00:06:23 +02:00
hackademix c61d11944b Version bump: 11.0.36rc1. 2020-08-06 23:18:41 +02:00
hackademix 290f721123 Version bump: 11.0.35. 2020-08-06 00:29:10 +02:00
hackademix 23e89b6998 Updated TLDs. 2020-08-06 00:29:05 +02:00
hackademix 1dd7d43384 Avoid unnecessary reloads on temporary permissions revocation. 2020-08-03 20:40:40 +02:00
hackademix 51c9ac2c83 Fixed potentially infinite loop in SyncMessage Firefox implementation. 2020-08-03 20:40:40 +02:00
hackademix 546277aaff [UI] Removed accidental cyan background for site labels. 2020-08-03 20:40:40 +02:00
hackademix 36cfc9b465 [L10n] Updated es. 2020-08-03 20:40:40 +02:00
hackademix 8c3c7a1f27 Version bump: 11.0.35rc4. 2020-08-03 20:40:40 +02:00
hackademix 762b0122ce Work-around for conflict with extensions inserting elements into content pages' DOM early. 2020-08-02 13:27:56 +02:00
hackademix 7af5194ef5 [XSS] Updated HTML events. 2020-08-02 13:27:56 +02:00
hackademix f6fb21b6fc Version bump: 11.0.35rc3. 2020-08-02 13:27:56 +02:00
hackademix 76d35299e1 Updated TLDs. 2020-07-29 16:23:56 +02:00
hackademix 93a2048699 Fixed buggy policy references in the Options dialog. 2020-07-29 16:23:56 +02:00
hackademix 35d82bd801 More accurate NOSCRIPT element emulation. 2020-07-29 16:23:56 +02:00
hackademix 5d92d1b974 Anticipate onScriptDisabled surrogates to first script-src 'none' CSP violation. 2020-07-29 16:23:56 +02:00
hackademix 67d4a97fdc isTrusted checks for all the content events. 2020-07-29 16:23:56 +02:00
hackademix 33f79c0964 Improved look in mobile portrait mode. 2020-07-29 16:23:56 +02:00
hackademix 3f5b0e90f4 Version bump: 11.0.35rc2. 2020-07-29 16:23:56 +02:00
hackademix 2e44f39c44 Let SyncMessage prevent undesired script execution scheduled during suspension. 2020-07-10 22:39:36 +02:00
hackademix c3b2270b8f Version bump: 11.0.35rc1. 2020-07-10 22:36:22 +02:00
hackademix 3d3331ee93 Version bump: 11.0.34. 2020-07-10 18:22:02 +02:00
hackademix 4d18298930 Fixed regression breaking network-based CSP injection. 2020-07-10 18:18:32 +02:00
hackademix fd7c5b08e9 Version bump: 11.0.34rc1. 2020-07-10 18:17:00 +02:00
hackademix aea8148f74 Version bump: 11.0.33. 2020-07-09 23:28:28 +02:00
hackademix e7b6805bb4 Switch from HTTP to DOM event based CSP reporting in compatible browsers. 2020-07-09 22:02:05 +02:00
hackademix b2ac66f36f [XSS] Updated HTML event attributes. 2020-07-09 22:00:24 +02:00
hackademix 6a685309e5 Updated TLDs. 2020-07-09 21:54:30 +02:00
hackademix ac9fb0cd1c Version bump: 11.0.33rc1. 2020-07-09 21:36:55 +02:00
hackademix f7b9bf3ff5 Version bump: 11.0.32. 2020-06-22 16:17:41 +02:00
hackademix 03725230f3 [L10n] Updated it, mk, sv_SE. 2020-06-20 15:05:42 +02:00
hackademix 68a5e9b7d7 Fixed setting CUSTOM permissions in private mode may cause the TRUSTED preset to become temporary. 2020-06-20 15:05:42 +02:00
hackademix 5850a2ae14 Updated TLDs. 2020-06-20 15:05:42 +02:00
hackademix 4087deca9b [XSS] Updated HTML 5 events support. 2020-06-20 15:05:42 +02:00
hackademix 9614be3db5 More compact high contrast appearance. 2020-06-20 15:05:42 +02:00
hackademix de6e67f071 Version bump: 11.0.32rc1. 2020-06-16 23:57:39 +02:00
hackademix 49e4767176 Version bump: 11.0.31. 2020-06-08 18:02:46 +02:00
hackademix c3127b7a4d Focus "OK" button on dialog-mode UI. 2020-06-06 22:03:11 +02:00
hackademix 54da001682 [L10n] Updated da. 2020-06-06 21:56:59 +02:00
hackademix db0e9b7592 Fixed various toolbar buttons DnD graphic issues. 2020-06-06 21:56:59 +02:00
hackademix 5715c41c6c Version bump: 11.0.31rc2. 2020-06-06 21:56:59 +02:00
hackademix 6fbbfa6d21 [L10n] Updated bn, br, ca, da, de, el, es, fr, he, is, it, ja, lt, mk, ms, nb, nl, pl, pt_BR, ru, sq, sv_SE, tr, zh_CN, zh_TW. 2020-06-05 20:50:47 +02:00
hackademix 4bb222b6d9 Fixed very low contrast HTTPS-only label in High Contrast mode. 2020-06-05 20:38:21 +02:00
hackademix d2f43eb305 More precise DnD of toolbar buttons + work-around for https://bugzilla.mozilla.org/show_bug.cgi?id=568313 2020-06-05 20:25:21 +02:00
hackademix 93fa4ad7dc Version bump: 11.0.31rc1. 2020-06-05 20:25:21 +02:00
hackademix f6f0c99f4d Version bump: 11.0.30. 2020-06-04 02:04:41 +02:00
hackademix aeb3b15543 Discoverable option to force site-leaking UI in PBM/Incognito. 2020-06-04 01:56:51 +02:00
hackademix 5e1f53dc34 [L10n] Updated he. 2020-06-03 23:11:03 +02:00
hackademix 435118b715 Easier keyboard navigation of preset configuration. 2020-06-03 23:10:17 +02:00
hackademix e312b8fcf8 Yellow-less UI palette. 2020-06-03 23:04:47 +02:00
hackademix fb77f20dee Version bump: 11.0.30rc1. 2020-06-03 22:50:06 +02:00
hackademix aec0f866fb Version bump: 11.0.29. 2020-06-02 18:22:31 +02:00
hackademix a00bf03e16 Consistent focus appearance across desktop and mobile. 2020-06-02 18:18:12 +02:00
hackademix b2def01a63 Fixed regression on Firefox 68 for Android: UI cannot be closed (thanks swalchko for report). 2020-06-02 17:57:08 +02:00
hackademix 4872b91be1 Version bump: 11.0.29rc1. 2020-06-02 17:50:11 +02:00
hackademix 7aaf2dc4aa Version bump: 11.0.28. 2020-06-01 21:25:34 +02:00
hackademix 872ef51da7 Version bump: 11.0.27. 2020-06-01 21:16:46 +02:00
hackademix b74d48366e Don't enforce Incognito UI restrictions if the "Override Tor Browser Security Level preset" option is checked. 2020-06-01 20:59:25 +02:00
hackademix 2d5f47563c Version bump: 11.0.27rc6. 2020-06-01 20:55:40 +02:00
hackademix 8b4d146edc Enter key closes the popup also while editing the CUSTOM preset. 2020-06-01 19:56:24 +02:00
hackademix 27ddb8124d Incognito-aware permissions persistence and UI (https://trac.torproject.org/projects/tor/ticket/29957) 2020-06-01 19:50:44 +02:00
hackademix 890c3a0a55 Removed inline preset options relics. 2020-06-01 18:00:35 +02:00
hackademix 26e6541d9b Version bump: 11.0.27rc5. 2020-06-01 17:53:35 +02:00
hackademix 2b5e9bb226 Fixed first capability checkbox accidentally "clicked" when opening CUSTOM by space bar. 2020-05-31 18:13:14 +02:00
hackademix bbcf630866 [A11y] Keyboard accelerators for toolbar buttons. 2020-05-31 18:11:51 +02:00
hackademix 162dd17a7a Version bump: 11.0.27rc4. 2020-05-31 16:40:00 +02:00
hackademix 56b939f6a2 Further keyboard UI accelerators. 2020-05-31 12:36:10 +02:00
hackademix e424fe9aa8 Reset non-secure site matches to DEFAULT unless setting UNTRUSTED to avoid confusion on preset changes. 2020-05-31 12:36:10 +02:00
hackademix ab6b390569 Version bump: 11.0.27rc3. 2020-05-31 11:17:47 +02:00
hackademix 2d48680cf6 [A11y] Keyboard-based UI navigation. 2020-05-31 00:20:07 +02:00
hackademix 69c3fa7599 Updated TLDs. 2020-05-31 00:20:07 +02:00
hackademix 3c12208311 Minor comment fix. 2020-05-31 00:20:07 +02:00
hackademix 16f8856264 Unspoofable browser version detection. 2020-05-31 00:20:07 +02:00
hackademix 65ca612e56 Version bump: 11.0.27rc2. 2020-05-29 00:27:50 +02:00
hackademix 9e23c15b79 Updated TLDs. 2020-05-28 00:53:10 +02:00
hackademix e74d197ccb Work-around Gecko 77 cached CSP issues (thanks acat for reporting https://trac.torproject.org/projects/tor/ticket/34305) 2020-05-28 00:53:02 +02:00
hackademix d486a96254 Remove active preset hilight at least until keyboard navigation is fixed. 2020-05-28 00:50:08 +02:00
hackademix 49bf7914f9 Version bump: 11.0.27rc1. 2020-05-27 23:27:04 +02:00
hackademix 1fa8f16379 Version bump: 11.0.26. 2020-05-17 01:24:02 +02:00
hackademix 1ff6071062 UI adjustments for better mobile experience (thanks Bram Pitoyo for suggestions). 2020-05-17 01:18:32 +02:00
hackademix 1596978848 Version bump: 11.0.26rc2. 2020-05-17 01:15:16 +02:00
hackademix c7fe4a3d94 Updated TLDs. 2020-05-15 21:34:53 +02:00
hackademix 212e6e2358 Fixed hard reload needed after releasing restrictions (regression on Firefox Beta). 2020-05-15 21:34:39 +02:00
hackademix 63ca29158a Fixed 3rd party scripts blocking regression on Firefox Trunk due to XBL removal (thanks guardao for reporting). 2020-05-15 21:33:16 +02:00
hackademix 7c8b75a671 Fixed typo in unused yet code. 2020-05-15 21:31:30 +02:00
hackademix d52358ffd2 Version bump: 11.0.26rc1. 2020-05-15 21:30:44 +02:00
hackademix 9f419ba490 Version bump: 11.0.25. 2020-04-19 23:49:27 +02:00
hackademix 1e01979e41 [XSS] Fixed false positives and timeouts (thanks riaggren for report). 2020-04-19 23:43:28 +02:00
hackademix 97c7cc74f3 Version bump: 11.0.25rc1. 2020-04-19 23:40:05 +02:00
hackademix 255548e2f4 Version bump: 11.0.24. 2020-04-16 19:58:01 +02:00
hackademix 8b130350ec Fixed SoundCloud login broken by NoScript being enabled. 2020-04-16 19:53:18 +02:00
hackademix bb00cb8c8b [XSS] Updated HTML5 events. 2020-04-16 19:52:17 +02:00
hackademix 861d38b654 Updated TLDs. 2020-04-16 19:47:37 +02:00
hackademix c4ad43c539 Version bump: 11.0.24rc1. 2020-04-16 19:46:36 +02:00
hackademix c3510de256 Version bump: 11.0.23. 2020-03-25 15:04:23 +01:00
hackademix 8acd1551d7 Updated TLDs. 2020-03-25 14:59:48 +01:00
hackademix 24aedad38c Further refresh syntax parsing leniency (thanks insertscript). 2020-03-25 14:59:48 +01:00
hackademix f101661175 Version bump: 11.0.23rc1. 2020-03-25 14:56:49 +01:00
hackademix 968fcd54a9 Version bump: 11.0.22. 2020-03-22 11:24:41 +01:00
hackademix 4a032f2411 Updated TLDs. 2020-03-22 11:06:13 +01:00
hackademix 8b12d19a2c [L10n] Updated he. 2020-03-22 11:06:07 +01:00
hackademix ab131302cd Uniform refresh url matching across HTTP and DOM checks (thanks insertscript). 2020-03-22 11:05:15 +01:00
hackademix 3fc639245b Version bump: 11.0.22rc1. 2020-03-22 10:54:26 +01:00
hackademix fe91ffe8d2 Version bump: 11.0.21. 2020-03-21 02:01:24 +01:00
hackademix 8b3a36b2e4 Fixed URL matching regexp (thanks insertscript). 2020-03-21 01:55:22 +01:00
hackademix e1cf2bb670 Version bump: 11.0.21rc1. 2020-03-21 01:53:45 +01:00
hackademix 8ae5c6a590 Version bump: 11.0.20. 2020-03-20 23:12:01 +01:00
hackademix ab2f078ca6 More aggressive blocking for data: refresh attempts (thanks insertscript). 2020-03-20 22:20:28 +01:00
hackademix 949d930662 Version bump: 11.0.20rc1. 2020-03-20 22:19:15 +01:00
hackademix 27d7d24aa5 Version bump: 11.0.19. 2020-03-18 22:56:50 +01:00
hackademix 5aff2e1d83 Prevent ANY redirection to data: URIs in documents. 2020-03-18 22:51:07 +01:00
hackademix 9b3a12f9a3 Version bump: 11.0.19rc1. 2020-03-18 16:21:52 +01:00
hackademix 4473f34d74 Version bump: 11.0.18. 2020-03-16 22:19:12 +01:00
hackademix 45de947fa0 Updated TLDs. 2020-03-16 19:33:27 +01:00
hackademix 02c1b2bed0 Apply "font-family: Inter" to the mobile stylesheet only. 2020-03-16 19:33:27 +01:00
hackademix a7e8e768d8 Version bump: 11.0.18rc1. 2020-03-16 19:10:56 +01:00
hackademix 31bdb5649a Version bump: 11.0.17. 2020-03-13 23:11:49 +01:00
hackademix f6d1c55eee Version bump: 11.0.16. 2020-03-13 23:03:11 +01:00
hackademix 6f5bd39323 Updated TLDs. 2020-03-13 22:37:22 +01:00
hackademix d8332adc4e Force CSP inheritance for redirections to data: URIs on Gecko pre-69. 2020-03-13 22:37:22 +01:00
hackademix c44ab6f8aa Added CSS reference to Inter font to improve UI look on Fenix. 2020-03-13 22:37:22 +01:00
hackademix cf89cf2848 Version bump: 11.0.16rc1. 2020-03-12 20:58:08 +01:00
hackademix a3750a3ad9 Version bump: 11.0.15. 2020-03-01 22:52:33 +01:00
hackademix 8f2f845856 Fixed CapsCSP bug allowing data: URLs to bypass font blocking (thanks dcent and skriptimaahinen). 2020-03-01 22:17:55 +01:00
hackademix acddfd8e79 [XSS] Prevent DOS detection from being triggered for already aborted requests (thanks therube). 2020-03-01 22:17:20 +01:00
hackademix 9981a1cc7b Version bump: 11.0.15rc1. 2020-03-01 12:15:23 +01:00
hackademix e9822e8d3a Version bump: 11.0.14. 2020-02-29 21:30:51 +01:00
hackademix 0db8791bf9 [L10n] Updated es and added bn. 2020-02-29 19:46:25 +01:00
hackademix fad07d98d6 [XSS] More accurate base64 checks on hash. 2020-02-29 19:43:17 +01:00
hackademix 8e90f2a8fe Updated TLDs. 2020-02-29 19:43:17 +01:00
hackademix e6af4b07c1 Minor adjustments for Firefox Preview (Fenix) compatibility. 2020-02-29 19:03:39 +01:00
hackademix 9a664f7b3b Refactored XSS filter into an asynchronous worker to better handle DOS attempts. 2020-02-29 19:01:45 +01:00
hackademix e48c2053df [XSS] Abort on InjectionChecker timeouts. 2020-02-10 08:53:22 +01:00
hackademix 979334df56 [XSS] Updated recognized HTML events. 2020-01-30 22:56:14 +01:00
hackademix db18e95a9b Fixed autoreload after popup closing broken on Vivaldi. 2020-01-30 22:56:14 +01:00
hackademix 927851e0fe Version bump: 11.0.14rc1. 2020-01-30 22:56:14 +01:00
hackademix 19dabf6c91 Version bump: 11.0.13. 2020-01-09 21:47:00 +01:00
hackademix d18138c152 [Chromium] Fix SyncMessage broken by feature-policy headers. 2020-01-09 21:42:03 +01:00
hackademix e886d7bea0 Version bump: 11.0.13rc1. 2020-01-09 21:06:02 +01:00
hackademix cbff25a46f Version bump: 11.0.12. 2020-01-08 19:26:30 +01:00
hackademix 42a2b73f0c [L10n] Updated ru. 2020-01-08 15:51:50 +01:00
hackademix 34746e8be4 Unrestricted tab support for service workers and their included 3rd party scripts. 2020-01-08 15:45:02 +01:00
hackademix ae8317da00 Record document origins in TabStatus. 2020-01-08 13:54:01 +01:00
hackademix bd5acb2be3 Support for reporting service workers and their imported scripts in UI. 2020-01-08 12:54:50 +01:00
hackademix ce6e5a54a0 Cross-browser request properties normalization. 2020-01-07 21:43:38 +01:00
hackademix 029f585b2e Updated TLDs. 2020-01-07 21:29:50 +01:00
hackademix d9a903172f Fixed initial requst URL lost across redirections. 2020-01-07 21:13:53 +01:00
hackademix ab865d14c2 Fixed settings export button broken on Vivaldi (issue #124). 2019-12-30 15:37:48 +01:00
hackademix 6166f8f280 Version bump: 11.0.12rc2. 2019-12-30 15:27:29 +01:00
hackademix eaf3c8376e Fixed UNTRUSTED domains accidentally set in "match HTTPS only" mode (issue #126). 2019-12-29 19:49:44 +01:00
hackademix 3bf2aab052 Version bump: 11.0.12rc1. 2019-12-29 08:48:13 +01:00
hackademix b58225d478 Version bump: 11.0.11. 2019-12-29 01:25:49 +01:00
hackademix 30fb4f3fbf [L10n] Updated da, de, fr, he, it, mk, nl, ru, sq, tr, zh_TW. 2019-12-29 01:23:43 +01:00
hackademix cf5a0b05c0 Fixed UI not working on pages were sessionStorage is disabled. 2019-12-29 01:07:10 +01:00
hackademix 3a76c012df Version bump: 11.0.11rc2. 2019-12-29 00:57:57 +01:00
hackademix ae554ff21a Updated TLDs. 2019-12-25 23:10:43 +01:00
hackademix e2f7de8fea Added "ping" (beacon/ping) capability control. 2019-12-25 23:09:56 +01:00
hackademix 98aff58771 Version bump: 11.0.11rc1. 2019-12-25 22:08:43 +01:00
hackademix db31a12e1e Version bump: 11.0.10. 2019-12-23 23:44:27 +01:00
hackademix 1b8d1c784c [Chromium] Fixed no permissions given on first page load in a session. 2019-12-23 23:34:22 +01:00
hackademix 87cee12aec Updated TLDs. 2019-12-23 13:12:18 +01:00
hackademix db77624f82 Removed unused "privacy" permission. 2019-12-19 07:49:27 +01:00
hackademix 907a9ce31e Version bump: 11.0.10rc3. 2019-12-19 07:47:40 +01:00
hackademix 528c8ea577 Fixed shortcut and context menu doing nothing unless browserAction icon is visible on Firefox (issue #58). 2019-12-11 21:19:18 +01:00
hackademix 974d22848d [L10n] Updated de, fr, he, nl, tr. 2019-12-11 21:19:05 +01:00
hackademix c192c3b663 Updated TLDs. 2019-12-11 12:57:48 +01:00
Jordan Hewitt 36ac3a0989 Fix minor typo regarding appearance redundancy. Issue 61. 2019-12-10 08:40:40 +01:00
hackademix d1af69f0f3 Version bump: 11.0.10rc2. 2019-12-10 08:35:01 +01:00
hackademix ab4e48b0eb Updated TLDs. 2019-11-25 11:00:07 +01:00
hackademix cc87b48861 Fixed scripts could not be enabled on file: SVG documents. 2019-11-25 10:55:32 +01:00
hackademix fd7718e6f8 Version bump: 11.0.10rc1. 2019-11-25 10:49:31 +01:00
hackademix 831c23ab7b Version bump: 11.0.9. 2019-11-19 10:21:12 +01:00
hackademix 1fc69298f5 [Chromium] Prevent duplicated MSE placeholders (e.g. on Youtube). 2019-11-16 19:05:13 +01:00
hackademix a1afd19a0e Updated TLDs. 2019-11-16 10:12:35 +01:00
hackademix 10aee8015e Fixed external scripts included in HEAD of file:// pages failing (issue #115). 2019-11-16 10:08:48 +01:00
hackademix ae0fdc18e7 Version bump: 11.0.9rc2. 2019-11-16 09:55:11 +01:00
hackademix c4cfee6983 Debug statement to monitor settings changes. 2019-11-15 22:56:15 +01:00
hackademix 290ea152f5 [XSS] Updated HTML 5 events inventory. 2019-11-15 22:56:15 +01:00
hackademix 73f74cc83f Best effort to make media placeholders visible and clickable. 2019-11-15 22:56:15 +01:00
hackademix 118eb535aa Placeholders for MSE on Chromium too. 2019-11-15 22:56:15 +01:00
hackademix 53bf224e84 Use invalid IP rather than domain name to prevent offline status from breaking sync messaging in Chromium. 2019-11-15 22:56:15 +01:00
hackademix cbd814754a Removed empty exportFunction() Chromium shim. 2019-11-15 22:48:49 +01:00
hackademix 2434053524 Updated TLDs. 2019-11-15 22:48:49 +01:00
hackademix 52242ca147 Version bump: 11.0.9rc1. 2019-11-08 15:24:10 +01:00
hackademix 00757801c3 Version bump: 11.0.8. 2019-11-07 22:37:04 +01:00
hackademix 506d1f4c4d [L10n] Updated da, ja, lt, mk, nl. 2019-11-07 15:18:29 +01:00
hackademix 2b7cc563dd Fixed onionSecure setting persistence issue (Tor ticket #32362). 2019-11-07 15:14:34 +01:00
hackademix 035b4f2827 Fixed CSP DOM injection breaking XML documents rendering. 2019-11-07 15:12:25 +01:00
hackademix 07d7819666 Version bump: 11.0.8rc1. 2019-11-06 16:21:44 +01:00
hackademix 7fa342335b Version bump: 11.0.7. 2019-11-04 12:40:47 +01:00
hackademix b6ddc2d502 Use fragments to reinsert and run previously blocked scripts. 2019-11-03 13:32:07 +01:00
hackademix 4f08302084 Fetch policies asynchronously for about: and javascript: URLs. 2019-11-03 13:31:04 +01:00
hackademix 049485e495 Remove loop around XHR. 2019-11-03 13:29:34 +01:00
hackademix 0ac6b4de85 Version bump: 11.0.7rc1. 2019-11-03 11:29:33 +01:00
hackademix c4aff4e0cf Version bump: 11.0.6. 2019-11-01 15:25:02 +01:00
hackademix c74024ad36 Compute the correct origin for the policy to be fetched from about:blank and javascript: URLs. 2019-11-01 15:23:21 +01:00
hackademix cd37d7987d Work-around for Youtube video elements positioned off-display at replacement time. 2019-11-01 14:56:39 +01:00
hackademix 374f7815ed Version bump: 11.0.6rc3. 2019-11-01 11:10:38 +01:00
hackademix 491bf8eb33 Script blocking before policy is fetched only for synchronous loads. 2019-11-01 00:19:56 +01:00
hackademix 7c33fddd2c Version bump: 11.0.6rc2. 2019-11-01 00:19:56 +01:00
hackademix 08a41b3a62 Fixed bug in policy fetching. 2019-10-31 23:52:54 +01:00
hackademix 25fd1727b6 Make tests not to run automatically on dev mode startup anymore. 2019-10-31 23:51:50 +01:00
hackademix d6465fead9 Version bump: 11.0.6rc1. 2019-10-31 19:40:08 +01:00
hackademix b7c093a8d7 Version bump: 11.0.5. 2019-10-31 17:40:47 +01:00
hackademix 9a0202d49a Use pseudo-sync messaging to fetch policies for non-HTTP page loads only. 2019-10-31 17:33:23 +01:00
hackademix 7e85f22d58 Version bump: 11.0.5rc3. 2019-10-31 13:37:06 +01:00
hackademix 54c24a5405 On Chrome limit SyncMessage usage to non-HTTP urls. 2019-10-31 00:14:26 +01:00
hackademix 4da9a3d4fb Version bump: 11.0.5rc2. 2019-10-31 00:01:02 +01:00
hackademix adfb29f581 Use semi-synchronous mode to fetch policies. 2019-10-30 23:37:55 +01:00
hackademix 17ebef5a48 Semi-synchronous mode to avoid HEAD element insertion issues causing some userscripts to fail. 2019-10-30 23:37:30 +01:00
hackademix c913c2151b Version bump: 11.0.5rc1. 2019-10-30 17:05:20 +01:00
hackademix 08e108227d Version bump: 11.0.4. 2019-10-27 22:20:03 +00:00
hackademix ad5f6b1786 [Tor] Treat .onion sites whose protocol is HTTP as if it was HTTPS. 2019-10-27 22:05:35 +00:00
hackademix b1733d4392 - Use this refence instead of global ns property. 2019-10-27 22:05:35 +00:00
hackademix bb64b759b1 Version bump: 11.0.4rc15. 2019-10-27 14:16:44 +00:00