4 Commits

Author	SHA1	Message	Date
Moamen Basel	806e0a4a7d	Post-merge hardening: CSV LF, version label, deferred globals, SECURITY.md, CHANGELOG, dependabot (#16) ... Five follow-ups from auditing #15: CSV LF prefix, runtime version label, deferred window-global scan, SECURITY.md threat model, CHANGELOG.md, dependabot.	2026-05-15 01:27:20 +03:00
Moamen Basel	fdd3be3d99	v2.1.0: security hardening + cross-browser parity + release CI (#15) ... Cherry-picks @anthonyonazure's closed PR #11 onto master post-Firefox port, adds Firefox parity for the nonce-validated interceptor bridge, and ships GH Actions for tag-driven releases plus PR validation. Closes #11 Co-Authored-By: Anthony <anthony@anthonyonazure.com>	2026-05-15 00:50:48 +03:00
moamen	b73c2185b0	v2.0.0: Complete rewrite - Manifest V3, enterprise-grade secret detection ... - Migrated to Chrome Manifest V3 with service worker architecture - 80+ secret detection patterns covering AWS, GCP, Azure, GitHub, GitLab, Stripe, Slack, Discord, OpenAI, and 30+ other providers - 10 scanning surfaces: inline scripts, external scripts, meta tags, hidden inputs, data attributes, HTML comments, URL params, web storage, cookies, and network response interception - Shannon entropy analysis for detecting undocumented secret formats - MAIN world interceptor for XHR/fetch response scanning and window globals - Professional dark-theme UI with filtering, search, and CSV/JSON export - Zero dependencies - removed jQuery, Bootstrap, font-awesome, popper - Proper XSS-safe DOM rendering throughout - Badge counter on extension icon showing finding count - All frames scanning including iframes	2026-04-07 18:22:42 +02:00
momenbasel	a9f7a03c45	first commit	2019-08-07 07:37:01 +02:00