44 Commits

Author SHA1 Message Date
Thomas Rientjes
ab43484f30 Bump version to 2.0.4 2018-05-29 01:23:55 +02:00
Thomas Rientjes
2a3e508441 Update and refactor existing codebase 2018-05-29 01:18:53 +02:00
Thomas Rientjes
1a7f41ee0a Merge pull request #258 from gorhill/experimental
Hide web accessible resources from websites
2018-05-14 23:14:47 +02:00
Raymond Hill
e6a5de1683 Guard web accessible resources from direct access by outside world
With Chromium-based browsers, web pages can access directly
Decentraleyes' web accessible resources, and thus detect
whether Decentraleyes is used by a visitor.

This potentially adds one bit of information to fingerprinting.

See: "Discovering Browser Extensions via Web Accessible Resources"
www.cse.chalmers.se/~andrei/codaspy17.pdf

Proof-of-concept: https://jsfiddle.net/fuqrudcs/

The change here is to use a secret when accessing a web accessible
resource. If the secret is not present when the resource is fetched
by the browser, the behavior will be the same as if the resource
is not web accessible.

When Decentraleyes redirects a request to one of its web
accessible resources, the secret is appended at the end of the
local URL as a query parameter.

The secret is generated at runtime when Decentraleyes is launched.
2018-03-06 12:24:48 -05:00
Thomas Rientjes
4c8262599e Bump version to 2.0.3 2018-02-21 15:41:55 -03:00
Thomas Rientjes
53c8dd2a1c Update and refactor existing codebase 2018-02-21 15:15:10 -03:00
Thomas Rientjes
b5d09327b8 Bump version to 2.0.2 2018-01-09 01:40:38 -03:00
Thomas Rientjes
9fe8cfb6d3 Update manifest.json 2018-01-09 01:39:49 -03:00
Thomas Rientjes
0072d3bf59 Update welcome page 2018-01-09 01:36:03 -03:00
Thomas Rientjes
e9ccd3e290 Update and refactor existing codebase 2018-01-08 14:52:54 -03:00
Thomas Rientjes
52c9b40c59 Bump version to 2.0.1 2017-11-20 15:05:58 -03:00
Thomas Rientjes
50428fcdc6 Update and refactor existing codebase 2017-11-20 14:50:11 -03:00
Thomas Rientjes
e1b80f73ae Apply fixes and optimizations 2017-11-10 15:25:31 -03:00
Thomas Rientjes
81f60022e8 Refactor existing codebase 2017-11-07 18:27:55 -03:00
Thomas Rientjes
00998af264 Rename ESLint configuration file 2017-11-07 18:04:38 -03:00
Thomas Rientjes
7f80465972 Merge pull request #168 from CapacitorSet/experimental
Add ESLint configuration files
2017-11-04 00:23:08 -03:00
Thomas Rientjes
90c1374c8d Bump version to 2.0.0 2017-10-31 14:39:23 -03:00
Thomas Rientjes
fd59656bb3 Improve tab URL detection logic 2017-10-31 13:10:24 -03:00
Thomas Rientjes
2e1ff77b1c Update and refactor existing codebase 2017-10-28 22:01:39 -03:00
Thomas Rientjes
318058e920 Update existing localizations 2017-10-28 22:00:12 -03:00
Thomas Rientjes
cffd907f88 Modify resource bundle libraries 2017-10-28 21:58:05 -03:00
Thomas Rientjes
b4a5aaf9d2 Refactor existing codebase 2017-08-09 19:49:04 -04:00
Thomas Rientjes
50ee191e22 Replace unnecessary assignments to innerHTML 2017-05-04 01:45:46 +02:00
Capacitor Set
17f4c986fd Fix eslint warnings 2017-04-30 21:24:28 +02:00
Capacitor Set
cc8898a386 Fix indentation error 2017-04-30 21:21:43 +02:00
Capacitor Set
c71216522f Add eslint config 2017-04-30 21:13:22 +02:00
Thomas Rientjes
d036d73ae2 Add support for Greek 2017-04-24 20:45:40 +02:00
Thomas Rientjes
4ded48a07f Update and localize extension description 2017-03-17 21:40:17 +01:00
Thomas Rientjes
5ce6d5f819 Bump version to 1.3.7.5 2017-03-17 00:42:27 +01:00
Thomas Rientjes
0e1b8bf8af Update README.md 2017-03-17 00:40:50 +01:00
Thomas Rientjes
bde8e6357b Implement context stripping for allowed CDN requests 2017-03-17 00:31:58 +01:00
Thomas Rientjes
51c076e984 Fix Subresource Integrity (SRI) validation issues 2017-03-16 21:39:30 +01:00
Thomas Rientjes
037ad24370 Implement request filters to improve performance 2017-03-15 13:58:04 +01:00
Thomas Rientjes
746c5694fb Update README.md 2017-03-14 20:09:23 +01:00
Thomas Rientjes
e7e56deca7 Bump version to 1.3.7.4 2017-03-14 18:28:20 +01:00
Thomas Rientjes
db4b4986de Fix a rare injection counter issue 2017-03-14 18:26:28 +01:00
Thomas Rientjes
bb31683bba Bump version to 1.3.7.3 2017-03-14 01:03:20 +01:00
Thomas Rientjes
3e8b347d6b Improve injection state management 2017-03-14 01:01:18 +01:00
Thomas Rientjes
82750cd381 Implement injection overview and icon badge 2017-03-13 19:29:18 +01:00
Thomas Rientjes
c5b9eda31a Bump version to 1.3.7.2 2017-03-13 17:41:16 +01:00
Thomas Rientjes
00f8bcbac4 Fix popup icon display issue 2017-03-13 09:27:47 +01:00
Thomas Rientjes
826cfd9f72 Improve compatibility with HTTPS Everywhere 2017-03-10 08:52:39 +01:00
Thomas Rientjes
b7392bca64 Add README.md and LICENSE.txt 2017-03-08 15:10:26 +01:00
Thomas Rientjes
3fc2648990 Add project files 2017-03-08 14:52:32 +01:00
3 changed files with 28 additions and 38 deletions

View File

@@ -1,30 +1,35 @@
Decentraleyes
Decentraleyes (Experimental)
=============
A [web browser extension](https://decentraleyes.org) that emulates Content Delivery Networks to improve your online privacy. It intercepts traffic, finds supported resources locally, and injects them into the environment. All of this happens automatically, so no prior configuration is required. Feel free to use the following [testing utility](https://decentraleyes.org/test) to find out if you are properly protected.
A reimplementation of current features of Decentraleyes. This project will help bring Decentraleyes to WebExtensions (Firefox 57 and higher), as well as Chromium-based browsers, Opera, and possibly even Edge.
> **Note:** Decentraleyes is no silver bullet, but it does prevent a lot of websites from making you send these kinds of requests. Ultimately, you can make Decentraleyes block requests for any missing CDN resources, too.
## Changelog
## Contributing Code
Below is a list of all notable changes made to the reimplementation project to date. This includes, but is most certainly not limited to, records of changes such as bug fixes, and new, removed, and updated features.
Suggestions in the form of **Issues**, and contributions in the form of **Pull Requests**, are highly welcome. You can also use the public contact details and PGP key on the extension's [contact page](https://decentraleyes.org/contact) to get in touch.
### v1.3.7.5
#### Prerequisites
* Fix Subresource Integrity (SRI) validation issues.
* Implement context stripping for allowed CDN requests.
* Implement request filters to improve performance.
* Mozilla Firefox 56 *(or higher)*.
### v1.3.7.4
> **Note:** If you want to contribute to the Firefox legacy extension, please check out the ```legacy``` branch. If you are looking for the Chromium-compatible codebase, please see the ```experimental``` branch.
* Fix rare injection counter issue.
#### Running the Code
### v1.3.7.3
Please read this [short guide](https://developer.mozilla.org/en-US/Add-ons/WebExtensions/Your_first_WebExtension#Trying_it_out) for information on how to run this extension from source.
* Improve injection state management _(requires a new permission)_.
* Implement injection overview and icon badge.
> **Important:** All commits since 26 October 2016 are signed with GPG. It's likely best to ignore unsigned commits, unless you really know what you're doing. Please send an email if you have any questions or security concerns.
### v1.3.7.2
## Submitting Translations
* Fix popup icon display issue.
Do you master a non-supported language? Please help out by translating this add-on on [Crowdin](https://crowdin.com/project/decentraleyes).
### v1.3.7.1
## License
* Improve compatibility with HTTPS Everywhere.
[MPL-2.0](https://www.mozilla.org/MPL/2.0).
### v1.3.7
* Initial release.

View File

@@ -47,13 +47,6 @@
"page": "pages/options/options.html"
},
"applications": {
"gecko": {
"id": "jid1-BoFifL9Vbdl2zQ@jetpack",
"strict_min_version": "56.0a1"
}
},
"web_accessible_resources": [
"resources/*"
]

View File

@@ -25,24 +25,16 @@
<div class="container">
<h1>For a smoother experience</h1>
<div class="notice">
<span class="subtle-hint"><span class="topic-label">Configure HTTPS Everywhere</span><br>There's no need to read any further, unless you actually use Decentraleyes in combination with the HTTPS Everywhere extension. If you do, please follow this <a href="https://decentraleyes.org/configure-https-everywhere/" target="_blank">short guide</a> to prevent, or resolve, any conflicts.</span>
</div>
<h1>What's new in version 2.0?</h1>
<div class="notice">
<span class="subtle-hint"><span class="topic-label">A Completely New Foundation</span><br>Decentraleyes has been fully rebuilt, on top of cutting-edge web technologies. As a result, it's even faster, more capable, and ready for upcoming versions of Firefox.</span>
<div class="topic-badge"><i class="fai fa-cube"></i></div>
</div>
<div class="notice">
<div class="topic-badge color-purple"><i class="fai fa-window-restore fa-flip-horizontal"></i></div>
<span class="subtle-hint"><span class="topic-label color-purple">A Clear User Interface</span><br>The extension is finally less shy about what it does to protect you. It shows you what exactly it injects into given pages, and puts all available features right at your fingertips.</span>
</div>
<div class="notice">
<span class="subtle-hint"><span class="topic-label">Improved Configurability</span><br>The options screen has been updated to give you more control over the extension. Settings that impact privacy, or website functionality, are now explicitly labeled as advanced.</span>