| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2021-08-04 | make settings_query.js use storage object passed as an argument | Wojtek Kosior | |
| 2021-07-23 | extract observables implementation from storage.js | Wojtek Kosior | |
| 2021-07-21 | add ability to query page content from repo and display it in the popup | Wojtek Kosior | |
| 2021-07-21 | store repository URLs in settings | Wojtek Kosior | |
| 2021-07-21 | remove unused variables | Wojtek Kosior | |
| 2021-07-20 | Merge rebranding to "Hachette" | Wojtek Kosior | |
| 2021-07-20 | fix page info server bugs | Wojtek Kosior | |
| 2021-07-20 | Merge commit 'ecb787046271de708b94da70240713e725299d86' | Wojtek Kosior | |
| 2021-07-19 | Refer to the extension consistently as "Hachette" and remove TODOS.org | jahoti | |
| from the copyright file | |||
| 2021-07-18 | Streamline and harden unique values/settings | jahoti | |
| The base URL is now included in the settings. The unique value no longer uses it directly, as it is included by virtue of the settings; however, the number of full hours since the epoch (UTC) is now incorporated. | |||
| 2021-07-17 | Revamp signatures and break header caching on FF | jahoti | |
| Signatures, instead of consisting of the secure salt followed by the unique value generated from the URL, are now the unique value generated from the policy value (which will follow them) succeeded by the URL. CSP headers are now _always_ cleared on FF, regardless of whether the page is whitelisted or not. This means whitelisting takes effect on page reload, rather than only when caching occurs. However, it obviously presents security issues; refinment will occur in a future commit. | |||
| 2021-07-16 | Use URL-based policy smuggling | jahoti | |
| Increase the power of URL-based smuggling by making it (effectively) compulsory in all cases and adapting a <salt><unique value><JSON-encoded settings> structure. While the details still need to be worked out, the potential for future expansion is there. | |||
| 2021-07-12 | merge jahoti into master | Wojtek Kosior | |
| 2021-07-12 | Stop using the nonce consistently for a URL | jahoti | |
| Nonces are now randomly generated, either in the page (for non-HTTP(S) pages) or by a background module which stores them by tab and frame IDs. In order to support the increased variance in nonce-generating methods and allow them to be loaded from the background, handle_page_actions is now invoked separately according to (non-)blocking mechanism. | |||
| 2021-07-06 | Merge popup display | Wojtek Kosior | |
| 2021-07-06 | show some settings of the current page in the popup | Wojtek Kosior | |
| 2021-07-04 | Revamp default settings | jahoti | |
| Default settings are now provided in the same format as data exported from the extension, incorporating them into the main program as part of the build process. Also, modify their contents; the apparently non-functional FSF stuff is gone, replaced with fixes for BandCamp, WorldCat, and SumOfUs. | |||
| 2021-06-30 | fix whitelisting under Firefox | Wojtek Kosior | |
| 2021-06-30 | refactor 3 miscellaneous fnctionalities to a their single own file | Wojtek Kosior | |
| 2021-06-30 | emply an sh-based build system; make some changes to blocking | Wojtek Kosior | |
| 2021-06-25 | gather all copyright info in 'copyright' file | Wojtek Kosior | |
| 2021-06-23 | Fix storage initialization on Icecat 60 | jahoti | |
| This patch fixes storage initialization on Gecko browsers by switching from using a background page to using a list of scripts. It remains a mystery why that should have any effect; the only hint is that browser.runtime.onInstalled does not fire when called from a script loaded in a background page. Signed-off-by: jahoti <jahoti@tilde.team> | |||
| 2021-06-18 | remove unused source files | Wojtek Kosior | |
| 2021-06-18 | when possible inject CSP as http(s) header using webRequest instead of ↵ | Wojtek Kosior | |
| adding a <meta> tag | |||
| 2021-06-14 | change licenses | Wojtek Kosior | |
| 2021-05-14 | support wildcard urls in settings | Wojtek Kosior | |
| 2021-05-13 | only allow a single injection payload for page, rely on script bags for ↵ | Wojtek Kosior | |
| complex payloads | |||
| 2021-05-12 | rename "bundles" to "bags" | Wojtek Kosior | |
| 2021-05-12 | use unique hashes when smuggling whitelist setting | Wojtek Kosior | |
| 2021-05-12 | stop using js modules | Wojtek Kosior | |
| 2021-05-12 | remove remnants of LibreJS | Wojtek Kosior | |
| 2021-05-10 | initial commit | Wojtek Kosior | |
 |
index : browser-extension | |
| A Web Extension to facilitate replacing sites' js with user-supplied scripts |
| summaryrefslogtreecommitdiff |
path: root/background