GitHub PushEvent at 2014-04-15 21:06:00
Repository: noscript
Actor: Lekensteyn
Payload: {"shas":[["ad56f091b83936407b6e8824d4588a7b1f29ecef","4e3ee39a3ffb735184735b6c3df737f2a63bf716@tablix.org","NoScript addons.mozilla.org release 2.6.8.5\n\nv 2.6.8.5\n=========================================================================\nx [ClearClick] Fixed empty contentEditable elements cannot receive\n  keyboard events in cross-site frames (breaking latest Youtube comments)\nx [XSS] Fixed false positive on redirected script inclusions (breaking\n  Stripe payments on Humblebundle, thanks ableeker for reporting)\nx [Surrogate] Better GA, GAPI, Twitter and Facebook compatibility","Tomaz Solc",false],["437d546abe42a17d7b35a5af5cda2f5be2bb4c45","4e3ee39a3ffb735184735b6c3df737f2a63bf716@tablix.org","NoScript addons.mozilla.org release 2.6.8.6\n\nv 2.6.8.6\n=========================================================================\nx Fixed bugs in noscript.allowedMimeRegExp support (thanks barbaz for\n  reporting)\nx [ABE] Fixed increased asynchronicity in Gecko's network processing\n  causing intermittent failures (thanks barbaz and al_9x for reporting)\nx [Surrogate] Fixed bug in asynchronous Google Analytics API emulation\n  (thanks Lucas Malor for reporting)\nx Fixed missing icon for blocked objects when no script is present in the\n  page and scrips are globally allowed","Tomaz Solc",false],["c58573d30d0c033af9a37b6a320354beb63ac5fb","4e3ee39a3ffb735184735b6c3df737f2a63bf716@tablix.org","NoScript addons.mozilla.org release 2.6.8.7","Tomaz Solc",false],["1b9b8cf09971816855e1b4748d449bc0993ab563","4e3ee39a3ffb735184735b6c3df737f2a63bf716@tablix.org","NoScript addons.mozilla.org release 2.6.8.8rc1\n\nv 2.6.8.8rc1\n=========================================================================\n+ [Surrogate] addthis.com widget emulation (thanks Mathnerd314","Tomaz Solc",false],["45f9f40cb957b439a9f23a39379e268fadb8eddf","4e3ee39a3ffb735184735b6c3df737f2a63bf716@tablix.org","NoScript addons.mozilla.org release 2.6.8.8rc2\n\nv 2.6.8.8rc2\n=========================================================================\n+ Enforce docShell-based script blocking for Gecko > 28","Tomaz Solc",false],["90c3ab94dc18819baa0bea40dd5ba7da1b94ac13","4e3ee39a3ffb735184735b6c3df737f2a63bf716@tablix.org","NoScript addons.mozilla.org release 2.6.8.8\n\nv 2.6.8.8\n=========================================================================\n+ Enforce docShell-based script blocking for Gecko > 28\n+ [Surrogate] addthis.com widget emulation (thanks Mathnerd314","Tomaz Solc",false],["44a138927267f8fa3497b5ed1dc72ecf5b7b08f1","4e3ee39a3ffb735184735b6c3df737f2a63bf716@tablix.org","NoScript addons.mozilla.org release 2.6.8.9rc1\n\nv 2.6.8.9rc1\n=========================================================================\nx [XSS] Fixed InjectionChecker tolerance bug (thanks Masato Kinugawa for\n  reporting)\nx [XSS] Improved sanitizatio","Tomaz Solc",false],["e1d92c4eef2a5da802670b06f7b1010e43258127","4e3ee39a3ffb735184735b6c3df737f2a63bf716@tablix.org","NoScript addons.mozilla.org release 2.6.8.9rc2\n\nv 2.6.8.9rc2\n=========================================================================\nx [XSS] Better fix for InjectionChecker tolerance bug (thanks Masato\n  Kinugawa for reporting)","Tomaz Solc",false],["3350ccf55a2d7b4ad4fce80c5b27a92300eaad74","4e3ee39a3ffb735184735b6c3df737f2a63bf716@tablix.org","NoScript addons.mozilla.org release 2.6.8.9rc3\n\nv 2.6.8.9rc3\n=========================================================================\nx [XSS] Improved pure HTML checks (thanks Masato Kinugawa for reporting)","Tomaz Solc",false],["6b19631288e73fd226fb9934af32989e7194fde2","4e3ee39a3ffb735184735b6c3df737f2a63bf716@tablix.org","NoScript addons.mozilla.org release 2.6.8.9rc4\n\nv 2.6.8.9rc4\n=========================================================================\nx [XSS] Better data: URI detection (thanks Masato Kinugawa for reporting)","Tomaz Solc",false],["0f8dd7ac7a7248433c8d987674eab338f869e721","4e3ee39a3ffb735184735b6c3df737f2a63bf716@tablix.org","NoScript addons.mozilla.org release 2.6.8.9rc5\n\nv 2.6.8.9rc5\n=========================================================================\nx [XSS] Stricter HTML checks (thanks Masato Kinugawa for reporting)\nx [ClearClick] Exception to cope with Youtube's Google+ comments","Tomaz Solc",false],["60cb5e238fde2ad7c985a90df7e31ff4404ffb28","4e3ee39a3ffb735184735b6c3df737f2a63bf716@tablix.org","NoScript addons.mozilla.org release 2.6.8.9\n\nv 2.6.8.9\n=========================================================================\nx [XSS] Stricter HTML checks (thanks Masato Kinugawa for reporting)\nx [ClearClick] Exception to cope with Youtube's Google+ comments\nx [XSS] Better data: URI detection (thanks Masato Kinugawa for reporting)\nx [XSS] Improved pure HTML checks (thanks Masato Kinugawa for reporting)\nx [XSS] Fixed InjectionChecker tolerance bug (thanks Masato Kinugawa for\n  reporting)\nx [XSS] Improved sanitizatio","Tomaz Solc",false],["85eac051e97fcf659db3bb1dbc28d18eaeaf6085","4e3ee39a3ffb735184735b6c3df737f2a63bf716@tablix.org","NoScript addons.mozilla.org release 2.6.8.10rc1","Tomaz Solc",false],["b2c6eece0972b621ae82bb0950b304511fbf0d83","4e3ee39a3ffb735184735b6c3df737f2a63bf716@tablix.org","NoScript addons.mozilla.org release 2.6.8.10\n\nv 2.6.8.10\n=========================================================================\nx [XSS] Fixed regression causing Google Talk false positive (thanks\n  Stuart Young for report)\nx Made about:srcdoc placeholder URL for seamless iframes \"mandatory\"\n  to reflect its actual permissions status (thanks barbaz for RFE","Tomaz Solc",false],["d33c6e0c368ae1ad5ce7eb1c01d457b0fa514357","4e3ee39a3ffb735184735b6c3df737f2a63bf716@tablix.org","NoScript addons.mozilla.org release 2.6.8.11rc1\n\nv 2.6.8.11rc1\n=========================================================================\nx [XSS] Stricter HTML checks on second-order data URI injections exactly\n  fitting whole URL attributes (thanks Masato Kinugawa for reporting","Tomaz Solc",false],["af71ab7ce7d4f43922038f4f916dbf510132d718","4e3ee39a3ffb735184735b6c3df737f2a63bf716@tablix.org","NoScript addons.mozilla.org release 2.6.8.11rc4\n\nv 2.6.8.11rc4\n=========================================================================\nx [XSS] Better checks for combined data/javascript URIs (thanks Masato\n  Kinugawa for reporting)","Tomaz Solc",false],["1c90a97be80d31c919b61cbe69472ca5ce2ec430","4e3ee39a3ffb735184735b6c3df737f2a63bf716@tablix.org","NoScript addons.mozilla.org release 2.6.8.11rc6\n\nv 2.6.8.11rc6\n=========================================================================\nx [XSS] Fixed bad charset checks not honoring exceptions (thanks Masato\n  Kinugawa for reporting)\nx Adopted the Components.utils.blockScriptForGlobal() API where possible","Tomaz Solc",false],["879518494cad8071bc1866343d8c3820b919f2ac","4e3ee39a3ffb735184735b6c3df737f2a63bf716@tablix.org","NoScript addons.mozilla.org release 2.6.8.11rc8\n\nv 2.6.8.11rc8\n=========================================================================\nx [XSS] Abort, rather than filter, potential charset-based attacks (\n  thanks Masato Kinugawa for reporting)\nx [XSS] Improved Ebay compatibility (thanks Markus Wienand for reporting)","Tomaz Solc",false],["3418e62b51d3dab6da91b3922fdc2214400c7cb6","4e3ee39a3ffb735184735b6c3df737f2a63bf716@tablix.org","NoScript addons.mozilla.org release 2.6.8.11rc10\n\nv 2.6.8.11rc10\n=========================================================================\nx [XSS] Fixed new inline script blocking approach (in Firefox Nightly)\n  not triggering NOSCRIPT element fallbacks","Tomaz Solc",false],["649c295b5e571fd59c2b4e3e57cf8428324913f2","4e3ee39a3ffb735184735b6c3df737f2a63bf716@tablix.org","NoScript addons.mozilla.org release 2.6.8.11\n\nv 2.6.8.11\n=========================================================================\nx [XSS] Fixed nested URL parsing optimization bug (thanks Masato Kinugawa\n  for reporting)\nx [XSS] Abort, rather than filter, potential charset-based attacks (\n  thanks Masato Kinugawa for reporting)\nx [XSS] Improved Ebay compatibility (thanks Markus Wienand for reporting)\n\nx [XSS] Fixed bad charset check regression from rc6 (thanks Masato\n  Kinugawa for reporting)\nx [XSS] Fixed bad charset checks not honoring exceptions (thanks Masato\n  Kinugawa for reporting)\nx Adopted the Components.utils.blockScriptForGlobal() API where possible\nx [XSS] Further improvements in recursive link checks (thanks Masato\n  Kinugawa for reporting)\nx [XSS] Better checks for combined data/javascript URIs (thanks Masato\n  Kinugawa for reporting)\nx [XSS] Restored fuzzy HTML sniffing in nested data URI (thanks Masato\n  Kinugawa for reporting)\nx [XSS] Improved data URI checks (thanks Masato Kinugawa for reporting)\nx [XSS] Enhanced recursive link checks (Thanks PK Cano for reporting)\nx [XSS] Stricter HTML checks on second-order data URI injections exactly\n  fitting whole URL attributes (thanks Masato Kinugawa for reporting)","Tomaz Solc",false]],"size":54,"ref":"refs/heads/master","head":"8c4e9f3514cccb9f90b10d840c355e9455912274"}