Skip to content

HarborDrop 1.4.4

Choose a tag to compare

@hjm79 hjm79 released this 02 Aug 00:45

HarborDrop 1.4.4

This maintenance release improves recovery for browser downloads that pass through temporary redirect targets.

Improvements

  • Preserved the original browser redirect source together with the observed target URL across extension, Native Messaging, and app handoff.
  • Added bounded recovery for expired observed redirect targets when the source can safely negotiate a fresh target.
  • Kept resumed and restored downloads on the same typed recovery path.

Fixes

  • Fixed downloads that could fail after a browser redirect target expired even though the browser could obtain a fresh target from the original URL.
  • Restricted redirect replay to trusted, bodyless GET requests and 404/410 target responses.
  • Prevented browser target cookies and authorization headers from being forwarded to a different-origin replay source.
  • Added regression coverage for redirect provenance, replay status boundaries, credential isolation, persistence, and restored-task probing.

Extension

  • Updated Full, CWS, and Firefox extension builds to version 2.3.15.