Skip to content

v1.9.1 - Slimmer Permissions

Choose a tag to compare

View all tags
@jeanlucaslima jeanlucaslima released this 16 Jun 04:42
v1.9.1
This tag was signed with the committer’s verified signature.
jeanlucaslima Jean Lucas
SSH Key Fingerprint: RHL6Qspthcx0OS2LcByeEslcBWUOesqBwYqQMyVP6hs
Verified
Learn about vigilant mode.
b5b2bf1
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

What's Changed

Removed the <all_urls> host permission.

ATO no longer requests broad host access. The tabs permission alone covers everything it does — reading tab titles and URLs (including local file:// pages) to detect duplicates, search, and group tabs, plus loading favicons. This was verified empirically:

  • file:// tabs are still detected as duplicates with no host permission and with "Allow access to file URLs" off.
  • Favicons render exactly as before.
  • Closing tabs is unaffected.

Why it matters

  • More private: the extension can no longer access page content on any site — it only reads tab metadata.
  • Faster Chrome Web Store reviews: broad host permissions trigger an in-depth review; dropping it avoids that.

No functional changes to features — duplicate detection, search (fuzzy / exact / wildcard), domain groups, playing-media, and undo all work the same.

🤖 Generated with Claude Code

Assets 3
Loading