Skip to content

NotionFlow v1.3.2 - Live WebKit Compatibility & Boot Crash Fix

Choose a tag to compare

@intelQong intelQong released this 05 Sep 15:02
· 6 commits to main since this release

What's New in v1.3.2 馃殌

  • Critical Boot Crash Fix: Fixed live startup crash on app.notion.com caused by CONFIG_OVERRIDE clobbering Notion's internal configuration bundle. Safely hooks window.CONFIG.isMobile via dynamic property descriptors so React initializes cleanly with 0 errors.
  • Trusted Types & CSP Compliance: Added safeSetHTML utility with Trusted Types policy integration and DOMParser fallback, eliminating require-trusted-types-for 'script' CSP violations.
  • Frame Isolation (@noframes): Userscript now strictly restricts execution to window.top, preventing script injection into third-party authentication and embed iframes (Google One Tap, Stripe, Apple Sign-in).
  • Cross-Origin Auto-Update: Added GM_xmlhttpRequest and GM.xmlHttpRequest support to UpdateChecker to cleanly bypass page connect-src CSP restrictions in Safari Userscripts and userscript managers.
  • Verified in Playwright WebKit: Thoroughly tested in headless WebKit using an iPhone 14 Pro emulation profile against live https://app.notion.com and https://www.notion.so with zero errors.