Repository navigation

fix(extension): security review fixes for the background and settings - #31

Merged

HackTuah merged 16 commits into

mainfrom

fix/sec-background

Oct 7, 2026

Merged

fix(extension): security review fixes for the background and settings#31
HackTuah merged 16 commits into
mainfrom
fix/sec-background

Commits on Oct 7, 2026
- fix(extension): a content type that isn't a string, and a test that depended on the date
  
  Ayla Croft
  and
  claude
  committed
  8a08928
- fix(extension): the pages' base languages never go back to an older list
  
  Ayla Croft
  and
  claude
  committed
  7ca742b
- fix(extension): only Kotiko's pages may skip the wait between syncs
  
  Ayla Croft
  and
  claude
  committed
  e5aa393
- fix(release): the store zips leave out the tests' hook
  
  Ayla Croft
  and
  claude
  committed
  c0c4c02
- fix(extension): every lookup asks for at most the spec's number of tokens
  
  Ayla Croft
  and
  claude
  committed
  f026ee3
- fix(extension): a page can't spoil a Connect OpenRouter sign-in
  
  Ayla Croft
  and
  claude
  committed
  aead17d
- fix(extension): localhost addresses are used as 127.0.0.1
  
  Ayla Croft
  and
  claude
  committed
  5fbaa00
- feat(extension): warn when a lookup service's address sends the key in clear
  
  Ayla Croft
  and
  claude
  committed
  eb72445
- fix(extension): the browser's languages stay on the device
  
  Ayla Croft
  and
  claude
  committed
  abcd363
- fix(extension): a store born from Delete everything takes nothing planted
  
  Ayla Croft
  and
  claude
  committed
  645df43
- feat(extension): the server proves it holds the token before it gets it
  
  Ayla Croft
  and
  claude
  committed
  cc15012
- style: names the linter flagged in the loopback and proof changes
  
  Ayla Croft
  and
  claude
  committed
  0f01c2a
- test(e2e): the end-to-end tests follow 127.0.0.1 and the server's proof
  
  Ayla Croft
  and
  claude
  committed
  1c27446
- Merge remote-tracking branch 'origin/fix/sec-server' into fix/sec-background
  Ayla Croft
  committed
  812a01b
- Merge branch 'main' into fix/sec-background
  HackTuah
  authored
  99515d0
- Merge branch 'main' into fix/sec-background
  HackTuah
  authored
  b9abe32

Commits

Commits on Oct 7, 2026