Owlpost v0.3.1

What's New

🐛 Bug Fixes

• Factory reset now fully clears all session data — the Preferences window's session (cookies, cache, storage) is now correctly wiped alongside the main Gmail session when you reset the app.
• Crash reporter no longer starts before you opt in — previously, the crash reporter could activate at launch before the user had explicitly enabled it in Preferences.
• Window position no longer saved in full screen, maximized, or minimized state — restoring the app after using full screen or maximizing no longer causes the next launch to open in an unexpected size or position.
• Fixed autoUpdater event listeners accumulating across multiple manual update checks.

🔒 Security

• Content Security Policy added to all renderer pages — the Preferences, titlebar, and error pages now have strict CSP headers (default-src 'none'), limiting what content can be loaded.
• Notification content is now sanitized — notification titles and bodies are truncated before being passed to the OS, preventing unexpectedly long strings from reaching system APIs.
• Preferences window session is now isolated — the Preferences window runs in its own session partition, keeping it fully separated from your Gmail session data.
• macOS update installer hardened — the temporary install script now uses a UUID in its filename, preventing predictable temp-path attacks.

🔧 Improvements

• Faster app launch — the Preferences window is no longer created at startup; it is initialized on first open instead.
• Injected scripts are now cached — notification and unread count scripts are cached after the first page load instead of being re-read from disk on every navigation.
• Window bounds are saved once on close rather than on every resize or move event.
• Titlebar navigation state updates are now skipped when nothing has changed, reducing unnecessary IPC traffic.