1.3.6

What's Changed

• Add two new cookies by @mikokm in #292
• Add url-changed.html page to test webTelemetry by @petevb in #302
• JS-leaks: Add recent Chrome profile + expand collection to non-enumerable props by @laghee in #319
• [Autofill] login page with identity by @dbajpeyi in #336
• Add Request Blocklist test page by @kzar in #348
• Add about blank empty address spoof by @not-a-rootkit in #354
• Update spoof-about-blank-emptyaddress.html by @not-a-rootkit in #358
• Add ch brand matching test by @laghee in #356
• Add a test for Autoconsent reload loop detection by @muodov in #360
• Bump body-parser from 2.2.0 to 2.2.1 by @dependabot[bot] in #359
• Update Request Blocklist test page to provide downloadable results by @kzar in #369
• Test for autoconsent heuristic mode by @muodov in #374
• Add blob URL navigation test page for iOS fix verification (#58) by @jonathanKingston in #376
• Add video-to-canvas capture test page by @jonathanKingston in #377
• Add video-to-canvas capture test with camera support by @jonathanKingston in #378
• Bump @duckduckgo/content-scope-scripts from 9.8.0 to 12.16.0 by @dependabot[bot] in #375
• Jkt/auto/video to canvas capture 5a2e by @jonathanKingston in #379
• Jkt/auto/video to canvas capture 5a2e by @jonathanKingston in #380
• Jkt/auto/video to canvas capture 5a2e by @jonathanKingston in #381
• Make scriptplay preset trigger play on load by @jonathanKingston in #382
• Add autocamera and more presets by @jonathanKingston in #383
• Jkt/auto/video to canvas capture 5a2e by @jonathanKingston in #384
• Content scope scripts css by @jonathanKingston in #387
• Dynamic download compatibility by @jonathanKingston in #393
• Jkt/auto/dynamic download compatibility a8c1 by @jonathanKingston in #394
• Jkt/auto/dynamic download compatibility a8c1 by @jonathanKingston in #395
• Pdf viewer capability page by @jonathanKingston in #396
• Add blocking-behaviour test by @r0mai in #397
• Add test for testing local-network-access by @r0mai in #398
• Some fixes for local-network-access test by @r0mai in #399
• Add permissions API webcompat test page by @jonathanKingston in #400
• DuckDuckGo test page by @jonathanKingston in #401
• Bump @duckduckgo/content-scope-scripts from 12.18.0 to 12.19.0 by @dependabot[bot] in #391
• Bump ws from 8.18.2 to 8.19.0 by @dependabot[bot] in #390
• Bump actions/checkout from 4 to 6 by @dependabot[bot] in #357
• Window.onerror indicator test by @jonathanKingston in #405
• Add optional ?timeout parameter to Storage Blocking test page by @kzar in #406

New Contributors

• @mikokm made their first contribution in #292
• @petevb made their first contribution in #302
• @laghee made their first contribution in #319
• @r0mai made their first contribution in #397

Full Changelog: 1.3.5...1.3.6

1.3.5

What's Changed

• Update to our global eslint and other dependencies by @jonathanKingston in #274
• Bump express from 4.19.2 to 5.1.0 by @dependabot in #269
• Revert "Bump express from 4.19.2 to 5.1.0" by @jonathanKingston in #275
• Add uncommon URL escape sequence test page by @not-a-rootkit in #261
• Bump @duckduckgo/content-scope-scripts from 9.6.0 to 9.8.0 by @dependabot in #278

Full Changelog: 1.3.4...1.3.5

1.3.4

What's Changed

• Bump node-cmd from 4.0.0 to 5.0.0 by @dependabot in #160
• Bump eslint-plugin-html from 7.1.0 to 8.1.1 by @dependabot in #201
• Bump eslint-plugin-import from 2.28.0 to 2.30.0 by @dependabot in #221
• Bump express from 4.18.2 to 4.19.2 by @dependabot in #200
• Update all references for [Back] for Security Badware Pages by @not-a-rootkit in #222
• Add simple local port scanning page. by @kdzwinel in #227
• Introduce bounce tracking test page. by @kdzwinel in #229
• Fix first-party.site url on the bounce tracking page by @kdzwinel in #230
• Port scanning by @kdzwinel in #231
• Add support for wss in port scanning by @kdzwinel in #232
• Add BLOB file download by @miasma13 in #233
• Update C-S-S package to pull in latest webcompat tests by @dharb in #236
• Expand bounce tracking page to cookies by @kdzwinel in #237
• Bounce to https websites (only use http for testing). by @kdzwinel in #238
• Add support for complex path file downloading by @jonathanKingston in #240
• Add example malware page for testing malware protections. by @not-a-rootkit in #239
• Remove vox AMP test by @sammacbeth in #241
• Add Malware Download Test Page by @not-a-rootkit in #242
• Add address bar spoofing test by @not-a-rootkit in #243
• Fix address bar spoofing server routes by @not-a-rootkit in #244
• Malicious site protection edge cases by @kdzwinel in #249
• Add new cases to referrer trimming manual tests by @bwaresiak in #251
• Add a test page for CPM filterlist by @muodov in #248
• fix the back link in autoconsent index by @muodov in #252
• Fix typo in the autoconsent test by @muodov in #253
• Add malware href link to malware download test by @not-a-rootkit in #254
• Support pdf url filenames in download feature by @jonathanKingston in #256
• Add more advanced malware download test cases by @not-a-rootkit in #257
• [Autofill] Test pages for partial form saves by @dbajpeyi in #255
• [CODEOWNERS] Add global owners to all features by @dbajpeyi in #258
• Add priority calculation logic to reach calculator by @kzar in #259
• Add scam test pages by @not-a-rootkit in #260
• Updating to latest C-S-S tests by @jonathanKingston in #262
• [Autofill] New form with credit card inputs and various focus events by @dbajpeyi in #263
• chore: ignore index.html from codeowners by @dbajpeyi in #264
• Bump eslint-plugin-import from 2.30.0 to 2.31.0 by @dependabot in #234
• Bump eslint-plugin-html from 8.1.1 to 8.1.3 by @dependabot in #267
• Bump body-parser from 1.20.2 to 2.2.0 by @dependabot in #270
• Bump ws from 8.13.0 to 8.18.2 by @dependabot in #268
• Bump the eslint group with 2 updates by @dependabot in #271
• Revert "Bump the eslint group with 2 updates" by @jonathanKingston in #273

New Contributors

• @dbajpeyi made their first contribution in #255

Full Changelog: 1.3.3...1.3.4

1.3.3

What's Changed

• Update expected AMP redirection URL by @kzar in #220

Full Changelog: 1.3.2...1.3.3

1.3.2

What's Changed

• Create reach-calculator.html by @tagawa in #190
• Update reach-calculator.html by @tagawa in #191
• Update breakage reach calculator by @tagawa in #193
• Add website that auto-refreshes every 3 seconds by @bwaresiak in #192
• Update app scheme target to spreadprivacy. by @not-a-rootkit in #194
• Re-add js-page-rewrite into address bar spoofing issues. by @not-a-rootkit in #195
• Re-add js-page-rewrite to index page. by @not-a-rootkit in #196
• Favicon test pages by @federicocappelli in #198
• Bump eslint-plugin-import from 2.27.5 to 2.28.0 by @dependabot in #164
• Bump ws from 7.5.9 to 8.13.0 by @dependabot in #159
• Re-add content-scope-scripts by @jonathanKingston in #199
• Reach calculator: Improve reduction assumption explanation by @tagawa in #205
• Testing popup behavior and security and privacy issues by @mikamikem in #197
• Exempt Safari and WebKit-based DDG browsers from using serverTiming by @englehardt in #206
• Open details on ad click test page by default by @englehardt in #207
• Add URL canonicalization tests. by @not-a-rootkit in #208
• Add pages to simulate HTTP and WebView errors by @nshuba in #209
• Update vox amp link by @SlayterDev in #210
• Added clarification of the Severity Assessment Matrix section by @tagawa in #211
• create separate signup form for ui testing by @brindy in #213
• add manual increment button by @brindy in #216
• Add extra phishing detection test pages by @not-a-rootkit in #217
• Remove ampproject.org link from test page by @SlayterDev in #218
• Add expected pixels to ad click attribution test cases by @kzar in #219

New Contributors

• @tagawa made their first contribution in #190
• @federicocappelli made their first contribution in #198
• @mikamikem made their first contribution in #197
• @nshuba made their first contribution in #209

Full Changelog: 1.3.1...1.3.2

1.3.1

What's Changed

• Add print demo page by @jonathanKingston in #186
• Add same frame single page test by @jonathanKingston in #187
• Windows Browser: Script Injection test pages by @RendijsSmukulis in #185
• Add AMP loop protection page by @SlayterDev in #182
• Add autofill case with disabled inputs by @GioSensation in #189

Full Changelog: 1.3.0...1.3.1

1.3.0

What's Changed

• Add storage test for setting a cookie via the cookieStore API in a serviceworker by @sammacbeth in #166
• Update README.md by @kdzwinel in #167
• Add Address Bar Spoofing Test Cases by @not-a-rootkit in #169
• Rename js-page-rewrite, and unsupported application scheme. by @not-a-rootkit in #171
• Update links between security tests and reduce timeout on address bar spoofing via tel:// protocol. by @not-a-rootkit in #172
• Add ability to disable individual FP tests via url param. by @kdzwinel in #173
• Add test for surrogate included in head tag by @sammacbeth in #170
• Update download URL to include a HTTP redirect in spoof-js-download-url by @not-a-rootkit in #175
• Add password update flows by @GioSensation in #176
• Improve usability of the surrogate script test page by @kzar in #178
• Add local 301 redirect for address bar spoofing test case. by @not-a-rootkit in #179
• Move address bar spoofing server routes out of server.js by @not-a-rootkit in #180
• Add viewport test pages by @muodov in #177
• Rewrite download path URL to prevent URI clashes by @not-a-rootkit in #181
• Autofill shadow dom test page by @GioSensation in #183
• Autofill shadow dom follow up by @GioSensation in #184

New Contributors

• @not-a-rootkit made their first contribution in #169

Full Changelog: 1.2.2...1.3.0

1.2.2

What's Changed

• Add detection for WebMidi and Window Placement APIs by @muodov in #162
• Migrate app off glitch.me onto own hosted infra by @KeaganJarvis in #165
• Update AMP test page expected URL by @joshliebe in #168

New Contributors

• @KeaganJarvis made their first contribution in #165
• @joshliebe made their first contribution in #168

Full Changelog: 1.2.1...1.2.2

1.2.1

What's Changed

• Remove 404'd AMP link by @SlayterDev in #161
• Update AMP test page expected URL by @sammacbeth in #163

Full Changelog: 1.2.0...1.2.1

1.2.0

What's Changed

• Clear data page. by @kdzwinel in #107
• Bump node-cmd from 4.0.0 to 5.0.0 by @dependabot in #140
• Bump eslint-plugin-promise from 4.3.1 to 6.1.1 by @dependabot in #141
• Bump body-parser from 1.20.1 to 1.20.2 by @dependabot in #142
• Bump ws from 7.4.0 to 8.13.0 by @dependabot in #143
• Bump @duckduckgo/content-scope-scripts from 4.5.0 to 4.6.0 by @dependabot in #144
• Bump @duckduckgo/content-scope-scripts from 4.6.0 to 4.10.1 by @dependabot in #148
• Ignore scripts on install, move C-S-S to be a build dep by @jonathanKingston in #150
• Remove eslint-plugin-promise as is a conflicting peer dep by @jonathanKingston in #151
• Add anchors to ad click test cases by @englehardt in #153
• password generation test page by @szanto90balazs in #154
• Add support for ad cookie checking by @jonathanKingston in #158
• Bump @duckduckgo/content-scope-scripts from 4.11.1 to 4.13.0 by @dependabot in #157

Full Changelog: 1.1.0...1.2.0