webext-signed-pages
webext-signed-pages copied to clipboard
tasn
A browser extension to verify the authenticity (PGP signature) of web pages
I've made another project aware [of this extension](https://github.com/threema-ch/threema-web/issues/427) and one question about the bundled PGP keys came up: > Furthermore, how would they prevent an attacker from simply sending a...
This is somehow related to issue #1 in making this extension even easier to use. The idea is that if you have the extension installed, and you visit a website...
At the moment, it's one pubkey per one pattern. You can workaround this by providing equivalent but slightly different regex patterns, but it's better to just support them natively.
Bumps [color-string](https://github.com/Qix-/color-string) from 1.5.3 to 1.9.1. Release notes Sourced from color-string's releases. 1.9.0 Minor Release 1.9.0 Add parsing of exponential alpha values for HWB and HSL (#66) Thanks to @babycannotsay...
![dependabot[bot] avatar](https://avatars.githubusercontent.com/in/29110?v=4 "dependabot[bot] avatar"){kind=avatar}
Heya! I'd like to propose that the signed pages web extension should disable JS when a page fails a signature check. This would help protect against the following attack 1....
Hi @tasn, I love the idea of this extension and wanted to adopt it for some of my projects, however I couldn't get it to work on the latest Firefox....
Bumps [qs](https://github.com/ljharb/qs) from 6.5.2 to 6.5.3. Changelog Sourced from qs's changelog. 6.5.3 [Fix] parse: ignore __proto__ keys (#428) [Fix] utils.merge: avoid a crash with a null target and a truthy...
Bumps [decode-uri-component](https://github.com/SamVerschueren/decode-uri-component) from 0.2.0 to 0.2.2. Release notes Sourced from decode-uri-component's releases. v0.2.2 Prevent overwriting previously decoded tokens 980e0bf https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.1...v0.2.2 v0.2.1 Switch to GitHub workflows 76abc93 Fix issue where decode...
Bumps [loader-utils](https://github.com/webpack/loader-utils) from 1.2.3 to 1.4.2. Release notes Sourced from loader-utils's releases. v1.4.2 1.4.2 (2022-11-11) Bug Fixes ReDoS problem (#226) (17cbf8f) v1.4.1 1.4.1 (2022-11-07) Bug Fixes security problem (#220) (4504e34)...
I love the concept of web page signing, and this implementation is super cool. I can get it working on Firefox 125. However, verification does not work on pages with...
