Age | Commit message (Collapse) | Author | |
---|---|---|---|
2021-07-16 | Use URL-based policy smuggling | jahoti | |
Increase the power of URL-based smuggling by making it (effectively) compulsory in all cases and adapting a <salt><unique value><JSON-encoded settings> structure. While the details still need to be worked out, the potential for future expansion is there. | |||
2021-06-30 | emply an sh-based build system; make some changes to blocking | Wojtek Kosior | |
2021-06-28 | License script-blocking techniques from NoScript in machine-readable format. | jahoti | |
In-page blocking now works on Firefox, and JavaScript/data- URLs are properly blocked to ensure no JavaScript leaks in through backdoors. Blocking of HTML/XML data: urls should be refined (eventually) to align with current practice for pages in general. Also, script-blocking is now filtered by nonce, making it possible (albeit perhaps not desirable) to inject scripts before the DOM is complete. | |||
2021-06-26 | remove mnetion of LGPL from javascript exception to the GPL | Wojtek Kosior | |
2021-06-25 | make it clear "A" license contains text from BSD license with its own copyright | Wojtek Kosior | |
2021-06-25 | gather all copyright info in 'copyright' file | Wojtek Kosior | |