Minor manifest change
Build LinkLog Development Image / development-image (push) Successful in 8s

This commit is contained in:
2026-08-26 21:46:21 +02:00
parent ffb12a36b5
commit 5dbef8f23f
5 changed files with 9 additions and 2 deletions
+1 -1
View File
@@ -156,7 +156,7 @@ The manifest includes stable Firefox extension metadata and references the packa
1. Start the backend locally. 1. Start the backend locally.
2. Open Firefox and visit `about:debugging#/runtime/this-firefox`. 2. Open Firefox and visit `about:debugging#/runtime/this-firefox`.
3. Select **Load Temporary Add-on**. 3. Select **Load Temporary Add-on**.
4. Choose `webextension/manifest.json`. 4. Choose `webextension/manifest.json` (Firefox 142 or newer is required).
5. Open the LinkLog extension options and enter: 5. Open the LinkLog extension options and enter:
- Backend URL: the URL of your LinkLog server, such as `http://localhost:8000` - Backend URL: the URL of your LinkLog server, such as `http://localhost:8000`
- Email: `alice@example.com` - Email: `alice@example.com`
+6
View File
@@ -1,5 +1,11 @@
# Chat Log # Chat Log
### User
The Firefox plugin tests report that `strict_min_version` 112 is too low for `data_collection_permissions`, `storage.session`, and `permissions.request`.
### Assistant outcome
Raised the extension minimum Firefox version to 142.0, covering the reported desktop and Android manifest/API compatibility warnings. Updated the README to require Firefox 142 or newer.
### User ### User
Implement SA-005: during startup reject missing or known development `LINKLOG_SECRET_KEY` in production, validate minimum length and entropy, require and validate the encryption key, and add fail-closed configuration tests. Implement SA-005: during startup reject missing or known development `LINKLOG_SECRET_KEY` in production, validate minimum length and entropy, require and validate the encryption key, and add fail-closed configuration tests.
+1
View File
@@ -203,6 +203,7 @@
196. Remedy SA-001: migrate logout from JSON token transport to the Authorization bearer header. 196. Remedy SA-001: migrate logout from JSON token transport to the Authorization bearer header.
197. Implement SA-002: replace raw infrastructure errors with redacted server-side logging, request IDs, and stable public reference messages. 197. Implement SA-002: replace raw infrastructure errors with redacted server-side logging, request IDs, and stable public reference messages.
198. Implement SA-005: reject missing/default/weak production secrets at startup and validate the Fernet encryption key, with configuration tests. 198. Implement SA-005: reject missing/default/weak production secrets at startup and validate the Fernet encryption key, with configuration tests.
199. Fix Firefox manifest compatibility warnings by aligning the minimum version with data collection permissions and session storage support.
## Future entries ## Future entries
Binary file not shown.
+1 -1
View File
@@ -30,7 +30,7 @@
"browser_specific_settings": { "browser_specific_settings": {
"gecko": { "gecko": {
"id": "linklog@kolkman.org", "id": "linklog@kolkman.org",
"strict_min_version": "112.0", "strict_min_version": "142.0",
"data_collection_permissions": { "data_collection_permissions": {
"required": ["websiteActivity"], "required": ["websiteActivity"],
"optional": [] "optional": []