Changelog
Version 1.1.0 is the current build. It is not published, so these entries describe the source rather than a release you can install.
1.1.0 — unreleased
- Removed a serious security problem. The 1.0.0 build stripped framing protection, the whole Content-Security-Policy and cross-origin isolation headers from every site while it was installed. That is gone, and the extension now actively removes the rule from any install that still carries it.
- No more always-on script. A 1.2 MB bundle used to run on every page whether or not you used the extension. Nothing runs until you open the toolbar.
- Cookie and cross-domain access are now optional and asked for one site at a time, instead of being granted at install.
- Your AI key moved out of reach of the page. It is held by the extension's worker, kept only for the session by default.
- Exports are spreadsheet-safe. Scraped values can no longer be interpreted as formulas when you open a CSV.
- Clearer failures. Tools now explain what they cannot do and why, rather than appearing to succeed.
1.0.0
Initial internal build, never published. Do not use it: see the first entry above.