summaryrefslogtreecommitdiff
path: root/src/bg
Commit message (Collapse)AuthorAgeFilesLines
* Fixed ns.requestCan() using hardcoded "script" rather than its capability ↵hackademix2019-03-161-1/+1
| | | | argument.
* "General/Cascade top document's restrictions to subdocuments" option ↵hackademix2019-03-153-6/+17
| | | | (default true on the Tor Browser).
* Remove double quotes around property names for consistency.hackademix2019-03-151-6/+6
|
* Selective handling of Tor Browser options and work-around for ↵hackademix2019-03-144-14/+72
| | | | https://bugzilla.mozilla.org/show_bug.cgi?id=1532530
* Added missing await to async options saving.hackademix2019-03-141-1/+1
|
* Cascade top document's restrictions to subframes (Tor issue #28873).hackademix2018-12-171-5/+20
|
* Limit fix for issue #41 to origin-less fetch (exclude frames).hackademix2018-11-251-2/+3
|
* Allow extensions to perform origin-less fetching and framing (issue #41).hackademix2018-11-241-1/+4
|
* Fixed issue #35 "tabId is not defined" on startup.hackademix2018-11-121-6/+6
|
* Darker red badge background to ensure text is kept white across browsers.hackademix2018-10-261-1/+1
|
* Fixed potential race condition in per-tab configuration cookie hack.hackademix2018-10-141-1/+2
|
* Use cookie instead of window.name as a tab-configuration hack.hackademix2018-10-133-16/+21
|
* Set tab restrictions status across all frames.hackademix2018-10-121-1/+1
|
* Simplified CSP HTTP header injection, avoiding report-to until actually ↵hackademix2018-10-061-12/+20
| | | | supported by browsers.
* Include ftp:// URLs in non-secure domain matching.hackademix2018-09-261-2/+6
|
* Fixed line endings.hackademix2018-09-151-38/+38
|
* Removed unused regexp.hackademix2018-09-101-1/+0
|
* Better IPV6 support.hackademix2018-09-101-9/+16
|
* Streamlined child policy content scripts.hackademix2018-09-101-2/+1
|
* Fix for various content script timing related issues.hackademix2018-09-092-25/+12
|
* Prevent total breakages when policies accidentally map to invalid match ↵hackademix2018-09-091-12/+21
| | | | patterns.
* More efficient window.name persistence for tab-scoped permissions.hackademix2018-09-083-2/+10
|
* Fixed regression: undefined fake request.url ends to for inline scripts CSP ↵hackademix2018-09-081-1/+1
| | | | reports.
* Saner message dispatching.hackademix2018-09-082-11/+13
|
* Fixed bug in requestKey generation.hackademix2018-09-051-1/+1
|
* Transparent support for FQDNs and better management of file:/// URLs.hackademix2018-09-041-12/+14
|
* Better file: protocol support.hackademix2018-09-043-42/+54
|
* Reordered startup sequence to be more friendly with embedders like the Tor ↵hackademix2018-08-282-45/+45
| | | | Browser.
* Merge pull request #16 from rustybird/startedhackademix2018-08-281-0/+1
|\ | | | | Broadcast a "started" message after initialization
| * Broadcast a "started" message after initializationRusty Bird2018-08-271-0/+1
| | | | | | | | | | | | | | | | | | Other extensions listening in on NoScript's messages (e.g. Torbutton) can take this message as an indication that it's now safe to send an "updateSettings" message to NoScript without immediately getting clobbered by the configuration loader. See https://trac.torproject.org/projects/tor/ticket/26520 for context.
* | Further CSP refactoring and removal of obsolete fallbacks.hackademix2018-08-274-152/+123
| |
* | Refactoring CSP building out of RequestGuard.hackademix2018-08-272-97/+57
|/
* Hotfix for some possible reload loops before refactoring CSP management.hackademix2018-08-251-7/+9
|
* Fixed infinite reload loop on unrestricted tabs.hackademix2018-08-241-2/+2
|
* Fixed minor CSP buildig issues.hackademix2018-08-241-4/+11
|
* Do not fail when onHeadersProcessed is called with no stored pending request.hackademix2018-08-231-3/+10
|
* Fixed regression: framed documents' URLs not being reported in the UI.hackademix2018-08-231-1/+1
|
* Update ChildPolicies when automatic temp TRUST for top-level document s is ↵hackademix2018-08-231-2/+2
| | | | enabled.
* More coherent wrapper around the webex messaging API.hackademix2018-08-222-16/+9
|
* Fixed possible surprises in background script message handling.hackademix2018-08-212-333/+311
|
* Fixed inconstitencies in ChildPolicies content script URL matching.hackademix2018-08-211-1/+2
|
* Simpler and more reliable safety net to ensure CSP headers are injected last ↵hackademix2018-08-201-23/+40
| | | | among WebExtensions.
* Fixed regression: refresh loop on page using requests of type="object" to ↵hackademix2018-08-191-1/+1
| | | | cache images, stylesheets and other types.
* More reliable attempt to run onResponseHeader listener the last of installed ↵hackademix2018-08-182-10/+20
| | | | extension.
* Removed all references to RequestUtil.js and dependancies.hackademix2018-08-186-175/+63
|
* Hack: use top.name to store per-tab content-side configuration (e.g. ↵hackademix2018-08-173-8/+26
| | | | unrestricted tab status).
* Policy serialization using the contentScripts API.hackademix2018-08-163-17/+116
|
* Best effort to run webRequest.onHeaderReceived listener last (issue #6)hackademix2018-08-061-6/+24
|
* Skip non-content windows when deferring startup page loading.hackademix2018-08-011-4/+4
|
* Fixed inline scripts not being reported to UI (skriptimaahinen).hackademix2018-08-011-0/+1
|