This commit is contained in:
@@ -156,7 +156,7 @@ The manifest includes stable Firefox extension metadata and references the packa
|
|||||||
1. Start the backend locally.
|
1. Start the backend locally.
|
||||||
2. Open Firefox and visit `about:debugging#/runtime/this-firefox`.
|
2. Open Firefox and visit `about:debugging#/runtime/this-firefox`.
|
||||||
3. Select **Load Temporary Add-on**.
|
3. Select **Load Temporary Add-on**.
|
||||||
4. Choose `webextension/manifest.json`.
|
4. Choose `webextension/manifest.json` (Firefox 142 or newer is required).
|
||||||
5. Open the LinkLog extension options and enter:
|
5. Open the LinkLog extension options and enter:
|
||||||
- Backend URL: the URL of your LinkLog server, such as `http://localhost:8000`
|
- Backend URL: the URL of your LinkLog server, such as `http://localhost:8000`
|
||||||
- Email: `alice@example.com`
|
- Email: `alice@example.com`
|
||||||
|
|||||||
@@ -1,5 +1,11 @@
|
|||||||
# Chat Log
|
# Chat Log
|
||||||
|
|
||||||
|
### User
|
||||||
|
The Firefox plugin tests report that `strict_min_version` 112 is too low for `data_collection_permissions`, `storage.session`, and `permissions.request`.
|
||||||
|
|
||||||
|
### Assistant outcome
|
||||||
|
Raised the extension minimum Firefox version to 142.0, covering the reported desktop and Android manifest/API compatibility warnings. Updated the README to require Firefox 142 or newer.
|
||||||
|
|
||||||
### User
|
### User
|
||||||
Implement SA-005: during startup reject missing or known development `LINKLOG_SECRET_KEY` in production, validate minimum length and entropy, require and validate the encryption key, and add fail-closed configuration tests.
|
Implement SA-005: during startup reject missing or known development `LINKLOG_SECRET_KEY` in production, validate minimum length and entropy, require and validate the encryption key, and add fail-closed configuration tests.
|
||||||
|
|
||||||
|
|||||||
@@ -203,6 +203,7 @@
|
|||||||
196. Remedy SA-001: migrate logout from JSON token transport to the Authorization bearer header.
|
196. Remedy SA-001: migrate logout from JSON token transport to the Authorization bearer header.
|
||||||
197. Implement SA-002: replace raw infrastructure errors with redacted server-side logging, request IDs, and stable public reference messages.
|
197. Implement SA-002: replace raw infrastructure errors with redacted server-side logging, request IDs, and stable public reference messages.
|
||||||
198. Implement SA-005: reject missing/default/weak production secrets at startup and validate the Fernet encryption key, with configuration tests.
|
198. Implement SA-005: reject missing/default/weak production secrets at startup and validate the Fernet encryption key, with configuration tests.
|
||||||
|
199. Fix Firefox manifest compatibility warnings by aligning the minimum version with data collection permissions and session storage support.
|
||||||
|
|
||||||
## Future entries
|
## Future entries
|
||||||
|
|
||||||
|
|||||||
Binary file not shown.
@@ -30,7 +30,7 @@
|
|||||||
"browser_specific_settings": {
|
"browser_specific_settings": {
|
||||||
"gecko": {
|
"gecko": {
|
||||||
"id": "linklog@kolkman.org",
|
"id": "linklog@kolkman.org",
|
||||||
"strict_min_version": "112.0",
|
"strict_min_version": "142.0",
|
||||||
"data_collection_permissions": {
|
"data_collection_permissions": {
|
||||||
"required": ["websiteActivity"],
|
"required": ["websiteActivity"],
|
||||||
"optional": []
|
"optional": []
|
||||||
|
|||||||
Reference in New Issue
Block a user