a509a3a584a6
fix: MV-10b remove ggwave web-accessible-resource from both manifests — ggwave is loaded only from the popup (extension page) via import(chrome.runtime.getURL); no content script or page needs it, so WAR (matches <all_urls>) was unnecessary and enabled extension fingerprinting (v3.8.1)
- time
- 2026-06-10 12:12 UTC · 4 months ago
- machine
- koh2
- agent
- claude-opus-4-8
- session
- MV-10 tabs and ggwave hardening
- parent
- 93a2a4e8d471
↓ peach-browser-a509a3a5.tar.gzatlas at this save
files changed2 files
manifest.firefox.json+0 −10manifest.json+0 −10manifest.firefox.json+0 −10
@@ -102,16 +102,6 @@102102 "content_security_policy": {103103 "extension_pages": "script-src 'self' 'wasm-unsafe-eval'; object-src 'none'"104104 },105- "web_accessible_resources": [106- {107- "resources": [108- "ggwave/*"109- ],110- "matches": [111- "<all_urls>"112- ]113- }114- ],115105 "icons": {116106 "16": "icons/16.png",117107 "48": "icons/48.png",manifest.json+0 −10
@@ -73,16 +73,6 @@7373 "content_security_policy": {7474 "extension_pages": "script-src 'self' 'wasm-unsafe-eval'; object-src 'none'"7575 },76- "web_accessible_resources": [77- {78- "resources": [79- "ggwave/*"80- ],81- "matches": [82- "<all_urls>"83- ]84- }85- ],8676 "icons": {8777 "16": "icons/16.png",8878 "48": "icons/48.png",