Skip to content

0.5.0

Latest
Latest

Choose a tag to compare

View all tags
@steipete steipete released this 18 Jul 19:00
0.5.0
This tag was signed with the committer’s verified signature.
steipete Peter Steinberger
SSH Key Fingerprint: buNEi6/r+uo+ILUkRvDkyyOc+SQ8kjWzo0lh99ci8NM
Verified
Learn about vigilant mode.
fa51d0b
This commit was signed with the committer’s verified signature.
steipete Peter Steinberger
SSH Key Fingerprint: buNEi6/r+uo+ILUkRvDkyyOc+SQ8kjWzo0lh99ci8NM
Verified
Learn about vigilant mode.

Highlights

  • Give each Chromium import explicit control over whether macOS Keychain may show user interaction, while preserving interactive recovery by default. (#15, thanks @Yuxin-Qiao)
  • Discover Firefox Beta, Developer Edition, and Nightly profiles as distinct stores without cross-channel duplicates. (#13, thanks @BasixKOR)
  • Reject malformed Safari cookie and Chromium LevelDB/Snappy data without unchecked reads or unbounded allocations. (#11)

Keychain access

  • Add BrowserCookieKeychainAccessGate.withUserInteractionDisallowed for background imports that must not display Keychain UI.
  • Try every available Chromium Safe Storage label without interaction before returning BrowserCookieError.accessDenied.

Browser support

  • Add typed browser cases, profile discovery, display metadata, and tests for Firefox Beta, Developer Edition, and Nightly.

Security and reliability

  • Bound Safari binary-cookie parsing and reject malformed page, record, and offset structures before reading them.
  • Harden Chromium LevelDB and Snappy decoding against truncated input, invalid lengths, and oversized allocations.

Maintenance

  • Update SwiftPM metadata for Swift 6.2 and keep the Swift-DocC plugin on the latest 1.5.0 release.

Full changelog

Contributors

BasixKOR and Yuxin-Qiao
Assets 2
Loading