Eddy 0.2.1 beta

A bug-fix release. Everything here is a correctness or privacy fix; there are no new features.

Downloads

• Incognito downloads no longer outlive the session that started them. They are recorded as incognito and removed when the last incognito tab closes. The saved file itself stays where you put it.
• Downloads started from an incognito tab used the normal cookie jar, so they sent your regular cookies to the site and could not fetch anything that needed the incognito sign-in. They now use the tab's own jar.
• Cookies are pinned to the host they were read for. A redirect can no longer carry them to a different origin. Redirects to a non-HTTP scheme, or from HTTPS down to HTTP, are refused.

Passwords

• Editing a saved login wrote the new row only after deleting the old one. An interruption in between lost the password. The new row is written first.
• The CSV importer treated a quote inside an unquoted field as the start of a quoted field, which merged the rest of the file into one cell. Such a quote is now literal text.
• Rows past the 10,000-row import cap are reported as skipped instead of disappearing from the count.
• The password manager asked every saved site for its favicon as soon as it opened, which announced your list of saved sites over the network. It no longer does.
• Autofill suggestions now name the site they will fill, and the page bridge ignores subframes so an embedded third-party frame cannot raise a save prompt.

Browsing

• Search suggestions are no longer sent to the search engine from incognito tabs.
• Closing a tab no longer reads or deletes its saved page history on the main thread.
• A tab selected twice while its saved state was still loading could build two WebViews and leak one.
• Favicons are stored under a SHA-256 name instead of a 32-bit hash, which collided and showed one site's icon next to another's name.

The database moves to version 3 for the new downloads column. The migration is automatic; nothing is lost on upgrade.

The attached APK is signed with the same key as previous releases.