1.1.0

Changes in this fork since upstream v1.0.3.

Proxy routing

• Added saved HTTP proxies with separate assignments for PwnFox containers, ordinary tabs, and private browsing. Editing a proxy keeps its assignments; deleting it switches those contexts to Direct.
• Unassigned contexts connect directly. When proxying is enabled, the default setup sends ordinary tabs to 127.0.0.1:8080. Containers and private browsing need their own assignments.

Firefox

• Updated the container palette for cyan and gray, kept legacy color mappings, and ordered swatches by hue.
• Made color-header tagging opt-in for new configurations. Cached proxy routes and container colors to reduce work on each request.
• Removed always-loaded content scripts. Toolbox scripts are registered only while injection is enabled; saved edits and script selections take effect on subsequent page loads.
• Limited Messages capture to the inspected tab while the panel is visible. The panel keeps the latest 250 messages, handles large and circular payloads, and clears its history when hidden.
• Replaced JavaScript message transformers and the dual-pane editor with text and regex filters for origin, destination, and payload.
• Moved security-header removal to Firefox's declarative network rules and improved popup/settings readability in light and dark themes.

Burp

• Migrated from the legacy Extender API to Montoya, using Java 21.
• Added Replace color header, off by default. Incoming proxy requests are highlighted as before; enabling this setting removes X-PwnFox-Color before forwarding them. The old extension automatically stripped all X-PwnFox-* headers across Burp tools.

Upgrading

• Requires Firefox 153+ and Burp running Java 21+ with compatible Montoya settings APIs. The extension is built against Montoya 2026.7.
• This fork has a separate Firefox add-on ID. Settings from upstream are not imported, and the old single-proxy configuration is not migrated. Recreate your proxy assignments and toolbox scripts.
• Allow Run in Private Windows in Firefox to use the private browsing proxy assignment.

Source code for 1.1.0