v0.9.1

Fixed

• Remote sign-in browser: Google's sign-in redirects to the country domain (for example accounts.google.at), which the navigation lock refused with "blocked by Chromium". Google's country domains are allowed now, and the lock applies to top-level navigations only, so frames that sign-in pages embed (captcha, accounts.youtube.com) still load. Frames may only load from Strava, its sign-in providers and a short list of captcha hosts, and the remote browser can no longer reach loopback, private or link-local addresses.