Don't grant special permission to launch itms: and itms-apps: urls in webkit. (OB-01-006)
move naive [NSHTTPCookieStorage setCookies] call out of [CKHTTPURLResponse initWithURL], implement it on the ProxyURLProtocol instead. (OB-01-005)

fixes severe issue with "Block Third Party Cookies" option.
version WIP
squelch some warnings by being explicit about whether certain values are long or standard-length int
remove unused functions from NSData additions
version ref
change DDG default to /html/ instead of /lite/
don't whitelist all SSL certificates from .onion addresses, let the user choose all the time.
update useragent strings
Change Active Content Blocking. A middleground option, "block XHR" now exists, which is the default.

WebSockets appear to connect outside of Tor and don't appear to be catchable via NSURLProtocol (our ProxyURLProtocol) or any other easy means. We allow users to turn these back on, but warn (loudly) against it. (OB-01-010)

* Previous "Allow All" setting migrated to "Block XHR".

* Previous "Block All" setting maintains "Block All" behavior.

* New "Allow All" setting is a new option, so existing users of Onion Browser shouldn't get it by default.
changelog
new startup page (http://onionbr5zulufnuj.onion/); change back to .onion version of https://mike.tig.as/
remove "onionbrowser:forcequit" and replace with explicit how-to-forcequit instructions. prevents attacks such as including "onionbrowser:forcequit" URL in an img tag. (OB-01-013)
changelog for OB-01-013 fix
prompt when loading an onionbrowser:// or onionbrowsers:// link from an outside app. (OB-01-017)
changelog OB-01-017
fixed how idiotically bad the loading spinner was and how it would stop while things were still loading
block non-image "data:" URIs from being loaded in address bar or via redirect. OB-01-016
OB-01-016
fix address bar and bad padding when pressing "new identity"