adlee-was-taken 2ff3ab1d7f feat(ext): drop setup.html / wasm from web_accessible_resources (audit C1) ...

setup.html is opened via chrome.tabs.create using a chrome-extension:// URL
which doesn't require WAR. WASM is bundled into service-worker.js/setup.js
and never fetched from a web page origin. Leaving them in WAR would expose
their URLs to any origin for probing/fingerprinting; shipping an empty WAR
array closes the surface.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-04-20 20:33:09 -04:00

..

icons

chore: rename project from idfoto to relicario

2026-04-19 16:47:02 -04:00

src

test(ext): vitest + router sender-check + origin-bound autofill

2026-04-20 20:15:49 -04:00

bun.lock

test(ext): vitest + router sender-check + origin-bound autofill

2026-04-20 20:15:49 -04:00

manifest.firefox.json

feat(ext): drop setup.html / wasm from web_accessible_resources (audit C1)

2026-04-20 20:33:09 -04:00

manifest.json

feat(ext): drop setup.html / wasm from web_accessible_resources (audit C1)

2026-04-20 20:33:09 -04:00

package.json

test(ext): vitest + router sender-check + origin-bound autofill

2026-04-20 20:15:49 -04:00

setup.html

chore: rename project from idfoto to relicario

2026-04-19 16:47:02 -04:00

tsconfig.json

fix(ext/build): exclude test files from webpack tsc compile

2026-04-20 20:25:53 -04:00

vitest.config.ts

test(ext): vitest + router sender-check + origin-bound autofill

2026-04-20 20:15:49 -04:00

webpack.config.js

chore: rename project from idfoto to relicario

2026-04-19 16:47:02 -04:00

webpack.firefox.config.js

chore: rename project from idfoto to relicario

2026-04-19 16:47:02 -04:00