v1.1.1

Specter 1.1.1

Reliability and security fixes from an external audit. No settings migration is needed, and the UI is unchanged apart from one setting description.

Changes

• Per-tab protection choices now survive the browser suspending Specter's background worker. They are kept for the browser session only, so a reused tab after a browser restart cannot inherit an old choice.
• Live setting changes reach every frame in a tab exactly once, including frames that loaded before a background restart. Previously each frame received each change three times, and frames could go stale after a restart.
• Websites can no longer fill Specter's storage with forged activity data. Oversized data is dropped, nothing is recorded while activity logging is off, and stored entries are size-limited.
• Site activity's Recorded events column now shows real counts instead of always 0.
• The popup's per-tab toggle targets the right tab when the popup is opened as a full tab.
• npm run build works on systems that only provide python3.
• Automatic reload on activation (off by default) now warns that it interrupts in-page downloads, uploads, and unsaved forms. If large downloads such as MEGA fail when you turn protection on, keep this option off.

Full details: #7, CHANGELOG.