Skip to content

noleaker v0.6.2

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 12 Nov 00:31
v0.6.2
e8d64cf

Fixes

  • fix: geolocation and Service Worker registration wait for the config at startup (B6) (302756f)
  • fix: trust only browser-made CSP violation events (B10 follow-up) (ac888b7)
  • fix: start the first worker natively on origins whose CSP blocks blob workers (B10) (3ab61a3)
  • fix: put back Persian fonts hidden before the page loaded them (B16) (7e6876e)
  • fix: reload tabs the startup guard blocked (B3) (e1a9271)
  • fix: workers on Trusted Types pages start natively instead of dying (B11) (213d253)
  • fix: leave more captcha providers untouched (B12) (b5a010b)
  • fix: rebase new Request() inside wrapped workers (B19) (f2c472c)
  • fix: strict ends workers that hold anything but the current config (B5 follow-up) (76b991b)
  • fix: options keep unsaved text across state changes (B15) (34983ff)
  • fix: strict mode terminates workers only when their identity changed (B5) (9fbc250)
  • fix: no false uncertain exit on dual-stack servers (B17) (3325b26)
  • fix: store no startup identity with Stealth on (9a0253b)
  • fix: a manual country spoofs only after a check saw the exit (B18) (01ad3f3)
  • fix: always remove extension frames from error stacks (B9) (f457270)
  • fix: start pages with the origin's last identity, not UTC/en-US (B6 partly, B7) (5f5aa69)
  • fix: Temporal toLocaleString in the spoofed zone and locale (B8 follow-up) (3117474)
  • fix: keep asking ipwho.is every check (B4 follow-up) (2c7137a)
  • fix: patch Temporal.Now to the spoofed zone (B8) (d962624)
  • fix: retry a failed exit check before the kill switch (B2); keep the timezone when ipwho.is fails (B4) (50621e4)
  • fix: accept privacy settings another extension holds with the right value (B1) (00436fb)
  • fix: match only the zone words engines parse (B14 follow-up) (67ac8d9)
  • fix: routing-list actions after a sidebar link (B13); US zone abbreviations in Date parsing (B14) (6fd48d4)
  • fix: preserve TrustedScriptURL policies for protected workers (4a46483)
  • fix: preserve blob worker sources under Cloudflare CSP (c2ea784)

Other changes

  • docs: record the frame whitelist header mismatch as a known limit (B20) (5fe294a)
  • chore: name the reasons for the last bundle-baseline raises (8b6c882)
  • docs: bug list from the audit of 2026-11-12 (883a78f)

Full changelog: v0.6.1...v0.6.2

Assets 6
Loading