Repository navigation

fix(extension): security review fixes for what web pages can see - #32

Merged

HackTuah merged 11 commits into

mainfrom

Oct 7, 2026

Merged

fix(extension): security review fixes for what web pages can see#32
HackTuah merged 11 commits into
mainfrom
fix/sec-page

Commits on Oct 7, 2026
- fix(extension): never show a page's own lang text in the popup
  
  Ayla Croft
  and
  claude
  committed
  2eceb7c
- fix(extension): open the word card only for the learner's own input
  
  Ayla Croft
  and
  claude
  committed
  1fffd51
- fix(extension): show pages nothing of Kotiko where it doesn't swap
  
  Ayla Croft
  and
  claude
  committed
  4b17f9f
- fix(extension): swap only text the learner sees, at most 500 words a page
  
  Ayla Croft
  and
  claude
  committed
  a29ef3e
- docs(privacy): say what websites can see of Kotiko, version 3
  
  Ayla Croft
  and
  claude
  committed
  db16a69
- Merge remote-tracking branch 'origin/fix/sec-background' into fix/sec-page
  Ayla Croft
  committed
  1e7e081
- refactor(extension): drop the dead stylesheet injection for open tabs
  
  Ayla Croft
  and
  claude
  committed
  9492118
- fix(extension): the content scripts' live-copy name passes the build's test-hook guard
  
  Ayla Croft
  and
  claude
  committed
  5f4a05c
- Merge branch 'main' into fix/sec-page
  HackTuah
  authored
  632bf7a
- test(extension): every content test page runs on one fixed day
  
  Ayla Croft
  and
  claude
  committed
  5699405
- fix(extension): a browser update after an update from 0.2 no longer drops the learner's words
  
  Ayla Croft
  and
  claude
  committed
  608a549