aboutsummaryrefslogtreecommitdiff
path: root/.editorconfig
diff options
context:
space:
mode:
authorTaneli Hukkinen <hukkinj1@users.noreply.github.com>2020-05-09 13:14:55 +0200
committerYury Selivanov <yury@edgedb.com>2020-05-13 11:40:09 -0700
commit34a5fcf87e7fc762216095ac75e4d030aaca8587 (patch)
treef83a89ddecdeaab02153b15297967fe1746104fe /.editorconfig
parent98158965b3b74db962394d35e3adf10cca9505cd (diff)
downloadimmutables-34a5fcf87e7fc762216095ac75e4d030aaca8587.tar.gz
immutables-34a5fcf87e7fc762216095ac75e4d030aaca8587.zip
Improve type annotations of Map.update and MapMutation.update
Diffstat (limited to '.editorconfig')
0 files changed, 0 insertions, 0 deletions
generated by cgit
d colspan='3' class='logmsg'> injected scripts 2021-08-20sanitize `<meta>' tags containing CSP rules under ChromiumWojtek Kosior This commit adds a mechanism of hijacking document when it loads and injecting sanitized nodes to the DOM from the level of content script. 2021-08-18remove unneeded policy-related cosole messages; restore IceCat 60 compatibilityWojtek Kosior 2021-08-18implement smuggling via cookies instead of URLWojtek Kosior 2021-08-14merge facility to install from HydrillaWojtek Kosior 2021-08-06Facilitate installation of scripts from the repositoryWojtek Kosior This commit includes: * removal of page_info_server * running of storage client in popup context * extraction of some common CSS to a separate file * extraction of scripts import view to a separate file * addition of a facility to conveniently clone complex structures from DOM (in DOM_helpers.js) * addition of hydrilla repo url to default settings * other minor changes and of course changes related to the actual installation of scripts from the repo 2021-08-04make settings_query.js use storage object passed as an argumentWojtek Kosior 2021-08-02[UNTESTED- will test] Add filtering for http-equiv CSP headersjahoti 2021-07-28Rationalize CSP violation report blocking.jahoti Report blocking now applies iff scripts are blocked. 2021-07-26code maintenanceWojtek Kosior 2021-07-26Squash more CSP-filtering bugsjahoti On Firefox, original CSP headers are now smuggled (signed) in an x-orig-csp header to prevent re-processing issues with caching. Additionally, a default header is added for non-whitelisted domains in case there are no existing headers we can attach to. 2021-07-26Fix some bugs in the refined CSP handlingjahoti 2021-07-26[UNTESTED- will test] Use more nuanced CSP filteringjahoti CSP headers are now parsed and processed, rather than treated as simple units. This allows us to ensure policies delivered as HTTP headers do not interfere with our script filtering, as well as to preserve useful protections while removing the ones that could be problematic. Additionally, prefetching should now be blocked on pages where native scripts aren't allowed, and all reporting of CSP violations has been stripped (is this appropriate?). 2021-07-26Remove unnecessary imports of url_item and add a CSP header-parsing functionjahoti The parsing function isn't used yet; however, it will eventually be as a less destructive alternative to handling headers as indivisible units. 2021-07-23extract observables implementation from storage.jsWojtek Kosior 2021-07-21add ability to query page content from repo and display it in the popupWojtek Kosior 2021-07-21store repository URLs in settingsWojtek Kosior 2021-07-21remove unused variablesWojtek Kosior 2021-07-20Merge rebranding to "Hachette"Wojtek Kosior 2021-07-20fix page info server bugsWojtek Kosior 2021-07-20Merge commit 'ecb787046271de708b94da70240713e725299d86'Wojtek Kosior 2021-07-19Refer to the extension consistently as "Hachette" and remove TODOS.orgjahoti from the copyright file 2021-07-18Streamline and harden unique values/settingsjahoti The base URL is now included in the settings. The unique value no longer uses it directly, as it is included by virtue of the settings; however, the number of full hours since the epoch (UTC) is now incorporated. 2021-07-17Revamp signatures and break header caching on FFjahoti Signatures, instead of consisting of the secure salt followed by the unique value generated from the URL, are now the unique value generated from the policy value (which will follow them) succeeded by the URL. CSP headers are now _always_ cleared on FF, regardless of whether the page is whitelisted or not. This means whitelisting takes effect on page reload, rather than only when caching occurs. However, it obviously presents security issues; refinment will occur in a future commit. 2021-07-16Use URL-based policy smugglingjahoti Increase the power of URL-based smuggling by making it (effectively) compulsory in all cases and adapting a <salt><unique value><JSON-encoded settings> structure. While the details still need to be worked out, the potential for future expansion is there. 2021-07-12