summaryrefslogtreecommitdiff
path: root/src
Commit message (Collapse)AuthorAgeFilesLines
* [XSS] Fixed anti-HPP coalescing wrongly applied to POST requests causing ↵hackademix2018-07-121-2/+2
| | | | JSON reduction optimization to choke on big payloads.
* Fixed first popup row not showing the initial site active preset.hackademix2018-07-121-30/+30
|
* Removed deprecated windowType usages.hackademix2018-07-122-4/+2
|
* Fixed meta-refresh emulation getting confused by quoted URLs.hackademix2018-07-121-1/+1
|
* Version bump: 10.1.8.3rc11.hackademix2018-07-121-1/+1
|
* Restored UNTRUSTED label localized string previously modified for testing.hackademix2018-07-121-1/+1
|
* Autosize preset buttons final.hackademix2018-07-122-39/+47
|
* Fixed race condition in work-around for broken feeds in ESR60.hackademix2018-07-111-12/+15
|
* Autosize preset buttons part 2.hackademix2018-07-112-4/+8
|
* Made preset buttons automatically sized according to their (localized) content.hackademix2018-07-113-5/+54
|
* Reload hack to let the RSS feed reader work on ESR60hackademix2018-07-101-13/+54
|
* Changed "script count" into "blocked items count" in badge appearance option.hackademix2018-07-101-1/+1
|
* Reverted <noscript> replacement to <span> over fingerprinting concerns.hackademix2018-07-091-1/+1
|
* Version bump: 10.1.8.3rc10.hackademix2018-07-091-1/+1
|
* More specific dynamic script injection exceptions.hackademix2018-07-091-14/+14
|
* Fixed label sizes in de localized messages.hackademix2018-07-091-2/+2
|
* Added two library files (one, lib/restricted.js, missing from rc8 tag) and ↵hackademix2018-07-093-1/+61
| | | | version bump.
* More graceful handling of internal and restricted URLs.hackademix2018-07-092-3/+9
|
* Content-side DOM insertions made compatible with XML document.hackademix2018-07-093-5/+9
|
* More specific content-type exception for dynamic script injection.hackademix2018-07-091-1/+2
|
* Removed console.log() patching test code accidentally committed in media.js.hackademix2018-07-081-3/+0
|
* Added de, es, fr, it, nl, pt_BR and zh_CN locales (courtesy of Mozilla's ↵hackademix2018-07-087-0/+4676
| | | | localization campaign).
* Truncate preset labels which exceed the button size, accomodating for longer ↵hackademix2018-07-081-1/+1
| | | | localized strings.
* Use a custom <no-script> element as <NOSCRIPT> replacement.hackademix2018-07-081-1/+1
|
* Version bump: 10.1.8.3rc8.hackademix2018-07-081-1/+1
|
* Fixed <NOSCRIPT> replacements to be inline elements.hackademix2018-07-081-1/+1
|
* Fixed dynamic script injection breaking images shown as frame content.hackademix2018-07-072-15/+17
|
* Work-around for onload not being fired on XML documents in Tor Browser/ESR60.hackademix2018-07-062-27/+41
|
* Version bump to 10.1.8.3rc7.hackademix2018-07-061-1/+1
|
* More informative / useful popup on (semi)privileged pages.hackademix2018-07-061-19/+34
|
* Backport dynamic script injection to Tor Browser / Fx ESR60.hackademix2018-07-031-4/+12
|
* Provide a uuid function fallback which doesn't fail in the Tor Browser.hackademix2018-07-031-3/+12
|
* Version bumb to 10.1.8.3rc6.hackademix2018-07-031-1/+1
|
* XSS filter autoupdated to latest HTML events supported by the browserhackademix2018-07-031-1/+1
|
* Fixed regression: dynamic script injection breaking images loaded as frame ↵hackademix2018-07-033-3/+19
| | | | content.
* Simplified and apparently more reliable+flexible+efficient dynamic script ↵hackademix2018-07-025-129/+65
| | | | injection method.
* Initial commit starting at version 10.1.8.3rc4.hackademix2018-07-0186-0/+10371