PageRenderTime 49ms CodeModel.GetById 16ms RepoModel.GetById 0ms app.codeStats 1ms

/src/Changelog

https://github.com/ei8fdb/https-everywhere
#! | 1436 lines | 1301 code | 135 blank | 0 comment | 0 complexity | de176fad207f6405261de30dedb1a3dd MD5 | raw file

Large files files are truncated, but you can click here to view the full file

  1. 4.0development.17 (2014-05-23)
  2. * Re-enable ability to see all rulesets in enable/disable dialog.
  3. * Fix allowing global installation:
  4. https://github.com/EFForg/https-everywhere/pull/255
  5. * Better observatory whitelisting:
  6. https://github.com/EFForg/https-everywhere/pull/276
  7. * Add option for SSL obs. revoked cert warnings:
  8. https://github.com/EFForg/https-everywhere/pull/278
  9. * Numerous ruleset updates
  10. 3.5.1 (2014-04-25)
  11. * Revert https://github.com/EFForg/https-everywhere/pull/134 due to YouTube
  12. breakage.
  13. * Re-enable ability to see all rulesets in enable/disable dialog.
  14. * Added more Debian coverage.
  15. * Fixes to Doubleclick, Guardian, Heroku, Home Depot, HypeMachine, IMDB,
  16. Justin.tv, Kikatek, Mozilla, MyFitnessPal, Pinterest, XKCD, Reuters,
  17. Technet, Tumblr, Wordpress, Yandex, Youtube, Flickr.
  18. * Fix Australis icon positioning:
  19. https://github.com/EFForg/https-everywhere/pull/216
  20. chrome-2014.4.25
  21. * Ruleset fixes (same as 3.5.1)
  22. chrome-2014.4.16
  23. * Make Chrome build script compatible with Chrome release scripts.
  24. * Fix disappearing icon: https://github.com/EFForg/https-everywhere/pull/220
  25. * Fix XKCD images
  26. chrome-2014.4.14.1
  27. * Revert back to chrome-2014.1.3 because of bug in Chrome release script.
  28. chrome-2014.4.14
  29. * Add SV localization
  30. * Add persistent user-generated rules, thanks to Vijay P.:
  31. https://github.com/EFForg/https-everywhere/pull/60
  32. * Use onBeforeRedirect for redirect loop detection:
  33. https://github.com/EFForg/https-everywhere/pull/199
  34. * Remove unneeded onBeforeSendHeaders listener:
  35. https://github.com/EFForg/https-everywhere/pull/172
  36. * Fix host-only cookie bug:
  37. https://github.com/EFForg/https-everywhere/pull/166
  38. * Split incognito mode:
  39. https://github.com/EFForg/https-everywhere/pull/165
  40. * Cleanup pageAction icon code:
  41. https://github.com/EFForg/https-everywhere/pull/173
  42. * Add and modify some rulesets (same as 3.5)
  43. 3.5 (2014-04-14)
  44. * Merge all non-ruleset changes from 4.0development.16
  45. * Merge all new/modified rulesets from 4.0development.16 that are
  46. in the Alexa Top 1000 using utils/alexa-ruleset-checker.py. For a full list,
  47. see utils/alexa-logs/07042014.log.
  48. 4.0development.16 (2014-04-14)
  49. * Restore code that loads custom rule files:
  50. https://github.com/EFForg/https-everywhere/pull/156
  51. * Use loadContext interface to get windows associated with requests
  52. * Reduce annoying logging messages
  53. * Report cert warning pages to SSL Observatory
  54. * Remove SSL Observatory observers when disabled
  55. * Don't set LOAD_REPLACE flag:
  56. https://github.com/EFForg/https-everywhere/pull/134
  57. * Add script to merge rulesets in Alexa Top 1M, thanks to Claudio MOretti:
  58. https://github.com/EFForg/https-everywhere/pull/149
  59. * 8 new rules
  60. * 59 modified rules
  61. 4.0development.15 (2014-02-05)
  62. * Replace the single XML ruleset library with an sqlite database of rulesets
  63. that are loaded on demand
  64. - reduces startup time by a factor of 10-20:
  65. https://trac.torproject.org/projects/tor/ticket/10174
  66. - reduces RAM usage https://trac.torproject.org/projects/tor/ticket/4804
  67. - Is scalable: https://trac.torproject.org/projects/tor/ticket/6118
  68. Further analysis in this thread:
  69. https://lists.eff.org/pipermail/https-everywhere/2014-January/001919.html
  70. * Implement a cleanup case to recover from some Observatory UI code bugs that
  71. would leave the Observatory off incorrectly.
  72. https://trac.torproject.org/projects/tor/ticket/10728
  73. * Fix observatory - private browsing mode interaction
  74. https://trac.torproject.org/projects/tor/ticket/10208
  75. * Ship 848 new rulesets
  76. * Update cert whitelist
  77. 3.5android.0 (2014-01-31)
  78. * First Firefox for Android release! :D
  79. * Major UI changes for mobile compatibility
  80. * Android channel update URL set to
  81. https://www.eff.org/files/https-everywhere-android-update-2048.rdf
  82. * Updated rulesets: Freenode, Imgur
  83. 3.4.5 (2014-01-03)
  84. * Updated license
  85. * Updated README.md
  86. * Updated contributors list
  87. * Fix a performance bug when re-enabling HTTPS-Everywhere from its menu
  88. * Observatory cert whitelist update
  89. * Updated rules: Atlassian, Brightcove, MIT, Pidgin, Microsoft, Whonix,
  90. Skanetrafiken, Stack-Exchange, Stack-Exchange-mixedcontent
  91. chrome-2014.1.3
  92. * Various ruleset fixes
  93. * Various performance improvements, thanks to Nick Semenkovich and Jacob
  94. Hoffman-Andrews!
  95. * Add LRU caching for rules
  96. * Refactor out unused code
  97. * Reload page when rule is disabled
  98. * Upgrade URI.js
  99. * Add fi translation
  100. 3.4.4tbb (2013-12-06)
  101. * Pseudorelease, just for Tor Browser Bundle usage
  102. * Tiny ruleset tweaks (XKCD is back)!
  103. * Create an about:config setting that overrules mixedcontent ruleset disablement
  104. 3.4.3 (2013-12-03)
  105. * Fixes: Cloudfront / Amazon MP3 player, Cornell/Arxiv, FlickR,
  106. AmazonAWS/spiegel.tv
  107. * Disable broken: Barns and Noble, Behance, Boards.ie, Elsevier, Kohls,
  108. OpenDNS, Spin.de, Svenskakyrkan
  109. * Deprecate the ContentPolicy API, fixing a crash bug
  110. lurking since Firefox 20:
  111. https://bugzilla.mozilla.org/show_bug.cgi?id=939180
  112. * Fix really silly Observatory UI bug that would leave the Observatory off
  113. for non-Tor users after they turned it on
  114. * Update Observatory blacklist
  115. * Bump maxVersion from Firefox 25 to 28.
  116. 4.0development.14 (2013-11-21)
  117. * Deprecate the ContentPolicy API, fixing a crash bug
  118. lurking since Firefox 20:
  119. https://bugzilla.mozilla.org/show_bug.cgi?id=939180
  120. * Fix really silly Observatory UI bug that would leave the Observatory off
  121. for non-Tor users after they turned it on
  122. * Ship 438 new rulesets
  123. * Update Observatory blacklist
  124. 4.0development.13 (2013-10-04)
  125. * HTTPS Everywhere builds are now deterministic!
  126. * Numerous new and updated rules
  127. 3.4.2 (2013-10-04)
  128. * HTTPS Everywhere builds are now deterministic!
  129. * Global memory leak bug fixes
  130. * Updated rules: Craigslist, Apple.com, Microsoft, CloudFront, UKLocalGov,
  131. Bing, Cengage
  132. * New rules from dev: IPTorrents.com, TvTorrents
  133. 4.0development.12 (2013-09-12)
  134. * Fix clients1.google.com OSCP meltdown
  135. https://trac.torproject.org/projects/tor/ticket/9713
  136. * Updated rules: ConnMan, Viddler.com, ISC, GNOME, Dozuki, Thingiverse, Box,
  137. ComputerWorld, Makerbot, McClatchy Interactive.com, Mozilla, Ohio State
  138. University, printrbot, Thingiverse, Tradedoubler, XiTi.com, Flameeyes, Open
  139. Clipart Library, Musopen, CERN, FilZilla, Google Services, Linux Foundation,
  140. Debian, Python.org, Ardour, Netmarble, Drexel University, Guifi.net,
  141. net-security.org, University of California, WordPress blogs, Perl.org
  142. * New rules: Akira.org, AntiPolygraph.org, Banu.com, break.com, Click and
  143. Pledge.com, DataCoup.com, linux-sunxi.org, Lockbox.com, PSC.edu, University
  144. of Greifswald, University of Rostock, WIMM.com, ZeusClicks.com,
  145. gayorrents.net, Addison.com.hk, Auto Ad Manager.com, Blutmagie.de,
  146. Brixwork.com, HDtracks.com, hostname.sk, iPXE.org, Linn Records.com,
  147. Navigant Research.com, OpenLDAP.org, Quotes and Sayings.com, Solid-Run.com,
  148. TU-Dresden.de, Tux.Org, Ultrasurf.us, Zamzar.com, chaox.net, digilinux.ru,
  149. iNaturalist.org, IUCNredlist.org, jensge.org, Libre Graphics World.org,
  150. NAB.org, PengPod.com, pythonhosted.org, randombit.net, factorable.net,
  151. JoeyH.name, Acunetix.com, Alex Cabal.com, Altera.com, Commotionwireless.net,
  152. CounterMail.com, dotplex.de, Dyne.org, finalrewind.net, Keelog.com,
  153. Mailinator.com, My Shadow.com, OpenMailBox.org, PwdHash.com, Silent
  154. Sender.com, Standard Ebooks.com, Tarasic.com.tw, Barracuda.com
  155. 4.0development.11 (2013-08-30)
  156. * Notify users who have been accidentally updated from stable to dev
  157. https://trac.torproject.org/projects/tor/ticket/9600
  158. * Added and updated numerous rules, including Craigslist
  159. * Fixes toolbar button size
  160. https://trac.torproject.org/projects/tor/ticket/9511
  161. * Declare loop variables with var to avoid global memory leaks
  162. * Updated localizations
  163. 3.4.1
  164. * Fix typo resulting in variable leak in get_prefs(), thanks to Jérémy
  165. Bobbio
  166. 3.4
  167. * Do not upgrade stable users to the development branch!
  168. * The previous release moved extension code from the development branch into
  169. the stable branch, and changed many stable rules
  170. chrome-2013.8.17
  171. * Urgent bugfix release for
  172. https://trac.torproject.org/projects/tor/ticket/9507
  173. - release from the stable / 3.0 branch, not master
  174. - don't ship the development ruleset library, it's not ready for prime
  175. time yet
  176. - avoid performance hits from repeatedly re-testing rulesets
  177. - other possible weirdness
  178. chrome-2013-8.16
  179. * Includes all fixes from 3.3, 3.3.1, and 4.0development.10
  180. * This will be the first Chromium release where the bulk of the rules that
  181. are broken because of mixed content will be disabled by default
  182. 4.0development.10
  183. * Numerous rules added, modified, and deleted
  184. * Added utils/find_rules.py, python script by Osama Khalid to apply HTTPS
  185. Everywhere rules to URLs
  186. * Updated readme to include more dependencies
  187. 3.3.2
  188. * We merged in a bunch of non-ruleset changes from 4.0development.9:
  189. https://trac.torproject.org/projects/tor/ticket/9480
  190. (Notable changes from this merge include a rewriting of fetch-source.js,
  191. improvements to the CSS such that the icon changes color when disabled
  192. and shows the number of applied rules when active, fixing bugs in
  193. HTTPSRules.js and ApplicableList.js that led to undefined functions,
  194. and rewriting makexpi.sh to accept a --fast flag.)
  195. * The tickets described below were fixed by the merge from 4.0development.9:
  196. https://trac.torproject.org/projects/tor/ticket/8998
  197. https://trac.torproject.org/projects/tor/ticket/9374
  198. * Add a script find_rules.py by Osama Khalid to utils/. It applies HTTPS
  199. Everywhere rules to URLs.
  200. * Add merge-rulesets.py from master to utils/.
  201. * Removed default parameters for a js function that caused breakage
  202. in older versions of FF.
  203. * Changed mixed content blocking in FF to be based on the user's active
  204. content blocking preferences rather than if the FF version is >=23.0.
  205. * [Zurcher_Katonalbank] Add rule
  206. * [LegitScript] www now supports SSL
  207. * [DebianOwnCA] Debian self-signed cert rules
  208. * [Debian] Update rule for non-self-signed domains
  209. * [UKLocalGov] Add havering.gov.uk
  210. * [aeriagames] Use CDN with valid cert
  211. * [spu.ac.th] Disable (https site not found)
  212. * Added rules from mishari for Loxinfo, SPU, Silkspan, Settrade,
  213. Powerbuy, opengarden.com, Naiin, MyHappyOffice, Mirakar,
  214. MarketingOops, Makewebeasy, m2fjob, LandandHouse, Jaymart,
  215. Etravelway, Craigslist, Blognone, TrueCorp, dealfish, 3bbwifi,
  216. thepiratebay, and priceza.
  217. * [Ubuntu] Add rule for ubuntuforums.org
  218. * [EuroBillTracker.xml] Add EuroBillTracker rule
  219. * [wikidot] Exclusion for iframes
  220. * [StockCharts] Add reason for disabling
  221. * [9gag] Disable rule for breaking AJAX.
  222. * [MayFirstPeopleLink] Updated rule
  223. * [Derpiboo.ru] Add rule
  224. * [Fedora Project] Split start
  225. * [Lurkmore.to] Add rule
  226. * [2ch.so] Add rule
  227. * [FSF] Added the status and u subdomains
  228. * [Reddit] Exclude blog
  229. * [Desk.com] Fix
  230. * [Cheezburger] Fix
  231. * Updated debian dependencies in readme
  232. * [Adtech.de] Add exclusion
  233. 3.3.1
  234. * [Wikimedia] removed mixedcontent
  235. 4.0development.9
  236. * Includes all fixes from 3.3
  237. 3.3
  238. * This major release fixed the following mixed content blocker (MCB)
  239. related bugs in time for Firefox 23:
  240. https://trac.torproject.org/projects/tor/ticket/9196
  241. https://trac.torproject.org/projects/tor/ticket/8774
  242. https://trac.torproject.org/projects/tor/ticket/8776
  243. * In effect, this update disables rulesets that cause mixed content errors
  244. by default, and adds platform="mixedcontent" to 950 new rules. This is
  245. necessary to prevent a massive amount of websites from breaking by default
  246. for our users when Firefox 23 comes out.
  247. * [Internet Archive] Moved to stable
  248. * [Linaro] Default off per webmaster request
  249. * [Applicom] Default off per webmaster request
  250. chrome-2013.7.10
  251. * In Chrome version, fixed css, "What is this?" link in popup, and added
  252. favicons to popup (thanks to Jay Weisskopf)
  253. * Includes all fixes from 3.2.4
  254. 3.2.4 (2013-07-10)
  255. * [Yandex] remove maps from exclusions
  256. * [Amazon Web Services] Add exclusion
  257. https://trac.torproject.org/projects/tor/ticket/8907
  258. * [Hotmail / Live] Add exclusion
  259. https://trac.torproject.org/projects/tor/ticket/9026
  260. * [Mozilla] Point labs to mozillalabs.org
  261. https://mail1.eff.org/pipermail/https-everywhere-rules/2013-July/001636.html
  262. * [Yandex] Exclude ll
  263. * [Brightcove] Add exclusion
  264. https://mail1.eff.org/pipermail/https-everywhere-rules/2013-May/001587.html
  265. * [NYTimes] Add exclusion, disabled
  266. * [News Corporation] Exclude 2013 images
  267. https://trac.torproject.org/projects/tor/ticket/9040
  268. * [imgbox] Fix typo
  269. https://trac.torproject.org/projects/tor/ticket/8690
  270. 3.2.3 (2013-06-28)
  271. * https://trac.torproject.org/projects/tor/query?group=status&milestone=HTTPS-E+3.2.3
  272. chrome-2012.6.4
  273. * The "factors of 12" chromium beta
  274. * Various ruleset fixes:
  275. https://eff.org/r.5bSj
  276. https://trac.torproject.org/projects/tor/ticket/8584
  277. https://trac.torproject.org/projects/tor/ticket/8571
  278. * Disable Myspace by default due to mixed content
  279. 4.0development.8 (2013-06-04)
  280. * Fix broken ruleset dialog in Firefox 22+
  281. https://trac.torproject.org/projects/tor/ticket/8997
  282. * The toolbar button chnages to indicate active rulesets:
  283. https://trac.torproject.org/projects/tor/ticket/4886
  284. * Ship 31 new rulesets
  285. * New translations: Japanese and Sinhala
  286. * Updated translations: Hungarian, Lithuanian, Slovenian
  287. * Ruleset fixes from 3.2.2:
  288. https://eff.org/r.5bSj
  289. * Observatory cert whitelist update
  290. 3.2.2 (2013-05-22)
  291. * Quick turn-around release to unbreak support.apple.com
  292. * Fixes for a number of other ruleset bugs:
  293. https://eff.org/r.5bSj
  294. * Incremental observatory cert whitelist update
  295. 3.2.1 (2013-05-17)
  296. * Implement XHR outstanding request limits to work around TCP connection
  297. exhaustion if the SSL Observatory server is slow or down:
  298. https://trac.torproject.org/projects/tor/ticket/8670
  299. https://bugzilla.mozilla.org/show_bug.cgi?id=856748
  300. * Overdue update to the Observatory cert whitelist
  301. * Other known ruleset fixes: EA, Yandex, Apple
  302. https://trac.torproject.org/projects/tor/ticket/8584
  303. https://trac.torproject.org/projects/tor/ticket/8571
  304. 4.0development.7 (2013-05-17)
  305. * Implement XHR outstanding request limits to work around TCP connection
  306. exhaustion if the SSL Observatory server is slow or down:
  307. https://trac.torproject.org/projects/tor/ticket/8670
  308. https://bugzilla.mozilla.org/show_bug.cgi?id=856748
  309. * Add a note hinting users how to toggle rulesets (thanks to Pavel Kazakov)
  310. https://trac.torproject.org/projects/tor/ticket/4967
  311. * Ship all fixes from 3.2:
  312. https://eff.org/r.b9Qc
  313. * Other known ruleset fixes: EA, Yandex
  314. https://trac.torproject.org/projects/tor/ticket/8571
  315. * Ship 1308 new rulesets!
  316. * Numerous new and updated translations
  317. chrome-2012.4.30
  318. * The "May day somewhere" chromium beta
  319. * Ship all ruleset bugfixes from the Firefox 3.2 release:
  320. https://eff.org/r.b9Qc
  321. * Flag/disable mixed content rulesets: Apple Support, BBC, Dell support,
  322. FBI, Wordpress, Zend
  323. https://eff.org/r.1bQt
  324. * Disable VistaX64
  325. https://trac.torproject.org/projects/tor/ticket/8801
  326. 3.2 (2013-04-25)
  327. * Related trac bugs for this release:
  328. https://eff.org/r.b9Qc
  329. * New: MoinMoin
  330. * Fixes: Adobe, Bahn.de, Cloudfront, Dell, Droplr, FBI, Google Maps,
  331. Joomla, Juno Download, Lenovo, New York Times, SEC, Soundcloud,
  332. Tweakers.net, Univ Strasbourg, Vkontakte, Zend
  333. * Disable broken: AirAsia, Netvibes, Newgrounds, Pirate Bay, Russia Today, SVT,
  334. Wolfram Alpha
  335. * Maybe fixed: Quantcast/Tumblr:
  336. https://trac.torproject.org/projects/tor/ticket/8406 (maybe fixed)
  337. * Sync languages and translations from the master branch.
  338. * New languages: Finnish, Norwegian (Bokmål), Slovak, Bulgarian.
  339. * All HTTPS Everywhere users will be now prompted about using the
  340. SSL Observatory.
  341. chrome-2012.3.7
  342. * The "cookies uncrumbled" chromium beta
  343. * Ship all ruleset bugfixes from Firefox 3.1.4
  344. * Stop securing HTTP (non-S) cookies in weird cases!!!
  345. https://trac.torproject.org/projects/tor/ticket/7492
  346. 4.0development.6 (2013-03-07)
  347. * Disabled 26 broken or problematic rulesets
  348. * Ship all ruleset fixes from 3.1.4
  349. * Ship 232 new rulesets
  350. * Numerous ruleset fixes
  351. * Update cert whitelist
  352. 3.1.4 (2013-03-07)
  353. * The circles are stable releasee
  354. * Fixes:
  355. AmazonAWS/Atomsforpeace.info, Disqus, Eventbrite, ImageShack.us, MySQL,
  356. NuGet, NYTimes, Ooyala, Opera, Scientific American, SourceForge,
  357. University of Southampton, UserVoice, WebType, Zendesk
  358. https://trac.torproject.org/projects/tor/ticket/8056
  359. https://trac.torproject.org/projects/tor/ticket/8349
  360. https://trac.torproject.org/projects/tor/ticket/7690
  361. https://trac.torproject.org/projects/tor/ticket/8025
  362. https://trac.torproject.org/projects/tor/ticket/8077
  363. https://trac.torproject.org/projects/tor/ticket/8199
  364. https://trac.torproject.org/projects/tor/ticket/8198
  365. * Disable broken:
  366. American Public Media (for real this time), Asymmetric Publications,
  367. Salsa Labs, Vimeo
  368. https://trac.torproject.org/projects/tor/ticket/7650
  369. https://trac.torproject.org/projects/tor/ticket/8280
  370. https://trac.torproject.org/projects/tor/ticket/7569
  371. * Update cert whitelist
  372. chrome-2013.1.18
  373. * "Internet Freedom" chromium beta
  374. * Import all ruleset fixes from Firefox 3.1.3
  375. 4.0development.5 (2013-1-18)
  376. * Internet Freedom Day development release
  377. * Fix the implementation of safeToSecureCookie
  378. - Get https://trac.torproject.org/projects/tor/ticket/7491 right(er)
  379. - Fix https://trac.torproject.org/projects/tor/ticket/7855
  380. * Fix a ruleset processing bug, which would prevent <target host="*.z.com">
  381. from matching x.y.z.com
  382. * Ship all ruleset fixes from 3.1.2 and 3.1.3
  383. - Except Etsy, where we're trying to fix rather than disable the ruleset
  384. https://trac.torproject.org/projects/tor/ticket/7774
  385. * Ship 354 new rulesets
  386. * Update cert whitelist
  387. * Update translations: Korean, Polish, French
  388. 3.1.3 (2013-1-18)
  389. * Internet Freedom Day stable bugfix release
  390. * Fixes: CloudFront/Spotify, AmazonAWS (Amazon MP3s and product images), Libav,
  391. Google Maps, UserEcho
  392. https://trac.torproject.org/projects/tor/ticket/7931
  393. https://trac.torproject.org/projects/tor/ticket/7888
  394. https://trac.torproject.org/projects/tor/ticket/7594
  395. https://trac.torproject.org/projects/tor/ticket/7539
  396. https://trac.torproject.org/projects/tor/ticket/7698
  397. * Disable broken: Coursera, EBay, Etsy, OpenOffice, Ping.fm, Pinterest :(
  398. https://trac.torproject.org/projects/tor/ticket/7336
  399. https://trac.torproject.org/projects/tor/ticket/7825
  400. https://trac.torproject.org/projects/tor/ticket/7774
  401. https://trac.torproject.org/projects/tor/ticket/7695
  402. https://trac.torproject.org/projects/tor/ticket/7777
  403. https://trac.torproject.org/projects/tor/ticket/7865
  404. * Update cert whitelist
  405. 3.1.2 (2013-1-2)
  406. * Release 3.1.2, since 3.1.1 was accidentally mis-tagged
  407. * Fixes for: AmazonAWS/Datawrapper, Cachefly, Cloudfront/C-SPAN, Hetzner.de
  408. KeyDrive/Snapnames, QT, openDesktop, OpenTTD, WhiskeyMedia
  409. https://mail1.eff.org/pipermail/https-everywhere-rules/2012-December/001432.html
  410. https://trac.torproject.org/projects/tor/ticket/7608
  411. https://trac.torproject.org/projects/tor/ticket/7567
  412. https://mail1.eff.org/pipermail/https-everywhere-rules/2012-December/001432.html
  413. https://trac.torproject.org/projects/tor/ticket/7560
  414. https://trac.torproject.org/projects/tor/ticket/7796
  415. * Disable broken: FlossManuals, Pastebin, Poste.it, Ustream, TED, AusGamers
  416. https://trac.torproject.org/projects/tor/ticket/7731
  417. https://trac.torproject.org/projects/tor/ticket/7850
  418. https://trac.torproject.org/projects/tor/ticket/7840
  419. https://trac.torproject.org/projects/tor/ticket/7548
  420. * Increase Observatory deployment (65%->85%)
  421. * Update cert whitelist
  422. chrome-2012.12.17
  423. * The "overdue bugfixes" chromium beta
  424. * Ship all ruleset bugfixes from Firefox 3.1 and 3.0.4
  425. * Additional fixes for: AmazonAWS/Datawrapper, Cachefly, Cloudfront/C-SPAN,
  426. Hetzner.de, KeyDrive/Snapnames, QT
  427. * Additionally disable: Automattic
  428. 4.0development.4 (2012-12-17)
  429. * Fix nasty bug that prevented Firefox downloads from Mozilla's CDN
  430. https://trac.torproject.org/projects/tor/ticket/7717
  431. * Fix download from qt-project.org
  432. * Ship 72 new rulesets
  433. * Include all rulset fixes from 3.1
  434. 3.1 (2012-12-12)
  435. * Hacky solution to a very nasty bug in which <securecookie> directives
  436. would cause cookies to be flagged as secure even if they were set from
  437. HTTP origins!
  438. https://trac.torproject.org/projects/tor/ticket/7491
  439. https://mail1.eff.org/pipermail/https-everywhere-rules/2012-November/001397.html
  440. * Fixes: Akamai, Biomed central, BYU, Cachefly / Topix, DuckDuckGo, Focus.de,
  441. Fortum, Mashable, Mail.ru, MayFirst/People Link, MIT, Rackspace,
  442. Salsa Labs, SurveyMonkey, Tumblr
  443. * Disable: Adtech.de, AllthingsD American Public Media, Dafont, MediaFire,
  444. Verizon, vk.com, Wired, Conde Nast
  445. * Observatory-only translations into Hebrew and Croatian
  446. * Offer the SSL Observatory popup to a larger cohort of users
  447. 4.0development.3 (2012-12-3)
  448. * Hacky solution to a very nasty bug in which <securecookie> directives
  449. would cause cookies to be flagged as secure even if they were set from
  450. HTTP origins!
  451. https://trac.torproject.org/projects/tor/ticket/7491
  452. https://mail1.eff.org/pipermail/https-everywhere-rules/2012-November/001397.html
  453. * Ship 245 new rulesets
  454. * Fixes include: Internet Archive, Rackspace
  455. * Disable broken: American Public Media, Verizon, Nieuwsblad.be, MyOpenID
  456. * (Plus fixes and rulesets disabled between 4.0dev2 and 3.0.4)
  457. * Observatory-only translations: Croatian, Hebrew
  458. 3.0.4 (2012-11-9)
  459. * Fixes:
  460. ACLU, Amazon, Barnes & Noble, CharityNavigator, Cloudfront/Turntable.fm,
  461. Coursera, itella.fi, posti.fi, Uservoice
  462. https://trac.torproject.org/projects/tor/ticket/7336
  463. https://trac.torproject.org/projects/tor/ticket/7273
  464. https://trac.torproject.org/projects/tor/ticket/7227
  465. * Disable broken:
  466. Asterisk, Boston Globe (separated out from NYTimes.com), Extabit, Gawker,
  467. Google Services (Followers widget), NPR, SF.se, SonyMusic, Statcounter, WebType
  468. https://trac.torproject.org/projects/tor/ticket/7270
  469. https://trac.torproject.org/projects/tor/ticket/7243
  470. https://trac.torproject.org/projects/tor/ticket/7361
  471. https://trac.torproject.org/projects/tor/ticket/7120
  472. https://trac.torproject.org/projects/tor/ticket/7278
  473. https://trac.torproject.org/projects/tor/ticket/7363
  474. https://trac.torproject.org/projects/tor/ticket/7294
  475. * No longer cacert: lawblog.de
  476. * Offer the SSL Observatory popup to a larger cohort of users
  477. * Update translations: Spanish, Russian, Turkish, Swedish
  478. chrome-2012.10.31
  479. * The "ghosts and goblins" chromium alpha
  480. * Work around a nasty bug that was affecting some high-volume Live Youtube streams
  481. (but not other live YouTube streams)
  482. https://trac.torproject.org/projects/tor/ticket/7127
  483. * Other Fixes:
  484. AdaCore, Akamai/MTV3 Katsomo, Akamai/HP, Atlassian, Bahn.de, MySQL, NPR, PBS,
  485. Phronoix Media/Openbenchmarking, SSRN, Spoki
  486. https://trac.torproject.org/projects/tor/ticket/7219
  487. https://trac.torproject.org/projects/tor/ticket/7180
  488. https://trac.torproject.org/projects/tor/ticket/7135
  489. https://trac.torproject.org/projects/tor/ticket/7206
  490. https://trac.torproject.org/projects/tor/ticket/7198
  491. * Disable broken/buggy:
  492. CBS/Last.fm, Citibank Australia, Bytename, HP, NIFTY, Microchip, MyOpenID, NttDocomo
  493. https://trac.torproject.org/projects/tor/ticket/6587
  494. https://trac.torproject.org/projects/tor/ticket/7226
  495. https://trac.torproject.org/projects/tor/ticket/7111
  496. https://trac.torproject.org/projects/tor/ticket/7161
  497. https://trac.torproject.org/projects/tor/ticket/7114
  498. https://trac.torproject.org/projects/tor/ticket/7138
  499. https://trac.torproject.org/projects/tor/ticket/7107
  500. 3.0.3 (2012-10-29)
  501. * Work around a nasty bug that was affecting some high-volume Live Youtube streams
  502. (but not other live YouTube streams)
  503. https://trac.torproject.org/projects/tor/ticket/7127
  504. * Other Fixes:
  505. AdaCore, Akamai/MTV3 Katsomo, Akamai/HP, Atlassian, Bahn.de, DemocracyNow, MySQL, NuGet,
  506. PBS, Phronoix Media/Openbenchmarking, SSRN, Spoki
  507. https://trac.torproject.org/projects/tor/ticket/7219
  508. https://trac.torproject.org/projects/tor/ticket/7180
  509. https://trac.torproject.org/projects/tor/ticket/7135
  510. https://trac.torproject.org/projects/tor/ticket/7206
  511. https://trac.torproject.org/projects/tor/ticket/7198
  512. * Disable broken/buggy:
  513. CBS/Last.fm, Citibank Australia, Bytename, HP, NIFTY, Microchip, MyOpenID, NttDocomo
  514. https://trac.torproject.org/projects/tor/ticket/6587
  515. https://trac.torproject.org/projects/tor/ticket/7226
  516. https://trac.torproject.org/projects/tor/ticket/7111
  517. https://trac.torproject.org/projects/tor/ticket/7161
  518. https://trac.torproject.org/projects/tor/ticket/7114
  519. https://trac.torproject.org/projects/tor/ticket/7138
  520. https://trac.torproject.org/projects/tor/ticket/7107
  521. * Updated translations:
  522. Greek, Russian, Latvian
  523. * New translation:
  524. Turkish
  525. * Offer the SSL Observatory popup to a larger cohort of users
  526. 4.0development.2 (2012-10-25)
  527. * Ship 67 new rulesets
  528. * Fix broken logouts from non-US Google accounts:
  529. https://mail1.eff.org/pipermail/https-everywhere-rules/2012-October/001347.html
  530. * Other fixes:
  531. Microsoft (Bing login button), ZeniMax, Ubuntuone, TrueCrypt, Springer,
  532. Optical Society, IMDB, Facebook, EzineArticles, Broadband Reports, Apache,
  533. Akamai (exclude Zynga content to prevent breakage of some Zynga games),
  534. Costco, Atlassian, Akamai/MTV3 Katsomo
  535. * Disable broken/buggy:
  536. HP, Bytename, NIFTY, Microchip, NttDocomo
  537. * Updated translations:
  538. Greek, Russian, Latvian
  539. * New translation:
  540. Turkish
  541. chrome-2012.10.18
  542. * The "even more perfect" chromium alpha
  543. * Fixes from the last two Firefox releases:
  544. Microsoft (Bing login button), ZeniMax, Ubuntuone, TrueCrypt, Springer,
  545. Optical Society, IMDB, Facebook, EzineArticles, Broadband Reports, Apache,
  546. Akamai (exclude Zynga content to prevent breakage of some Zynga games),
  547. Costco Akamai/SVTplay.se, Bahn.de, European Southern Observatory, IEEE,
  548. Indeed, Java, Librivox, Pinterest, New York Times, Springer, Vimeo,
  549. Shannon Health, O'Reilly Media
  550. * Also fix: DemocracyNow, NuGet
  551. * Disable: NIFTY
  552. 3.0.2 (2012-10-16)
  553. * Some fixes that should have shipped in 3.0.1, but actually didn't:
  554. European Southern Observatory, Indeed, LibriVox
  555. * New fixes:
  556. Microsoft (Bing login button), ZeniMax, Ubuntuone, TrueCrypt, Springer
  557. (fix / reenable), Optical Society, IMDB, Facebook, EzineArticles,
  558. Broadband Reports, Apache, Akamai (exclude Zynga content to prevent
  559. breakage of some Zynga games), Costco
  560. 4.0development.1 (2012-10-11)
  561. * Merge the 4.0 branch, which ships 884 new rulesets and expands
  562. hundreds of others
  563. 3.0.1 and 4.0development.1:
  564. * Fixes: adition.com, Akamai/SVTplay.se, Bahn.de, European Southern Observatory,
  565. IEEE, Indeed, Java, Librivox, Pinterest, New York Times, Springer, Vimeo,
  566. Shannon Health, O'Reilly Media
  567. https://trac.torproject.org/projects/tor/ticket/7080
  568. https://mail1.eff.org/pipermail/https-everywhere/2012-October/001583.html
  569. https://mail1.eff.org/pipermail/https-everywhere-rules/2012-October/001339.html
  570. https://mail1.eff.org/pipermail/https-everywhere-rules/2012-October/001343.html
  571. * Disable broken: Springer
  572. https://mail1.eff.org/pipermail/https-everywhere-rules/2012-October/001340.html
  573. * Updated translations: Basque, Hungarian, Traditional Chinese
  574. chrome-2012.10.9
  575. * The "prepare for liftoff" chromium alpha
  576. * Add an experimental Spanish translation!
  577. * Fixes:
  578. Akamai/CNN, GO.com/ABC, AWS/Amazon Zeitgeist MP3 player, AWS/Spiegel.tv,
  579. Technology Review, Cloudfront/Tunein, Akamai/Discovery Channel, Beyond
  580. Security, OCaml, Gentoo, Nokia, Widgetbox.com, Squarespace, 1and1
  581. Internet, American Physical Society, Baker and Taylor, Barnes and Noble,
  582. Cloudfront, Trustguard, IEEE, Mozilla, Nrelate, OpenDNS, RFC Editor,
  583. Symantec, Valve, Zenimax-Media
  584. * Disable buggy: Web.de, AJC.com, Feross, Bestofmedia, Grooveshark, Gearhog
  585. 3.0 (2012-10-04)
  586. * Since version 2.x:
  587. * 1,455 new active rulesets
  588. * UI improvements:
  589. - right-click to view ruleset source in the config window
  590. - translate some untranslated menus
  591. - better icons in a few places (breaking/redirecting rules,
  592. context button)
  593. * Numerous improvements to the SSL Observatory internals, including cached
  594. submissions on hostile networks, better Tor and Convergence integration,
  595. and a new setting to control self-signed cert submission
  596. * New translations: Basque, Czech, Danish, French, Greek, Hungarian,
  597. Italian, Korean, Malaysian, Polish, Slovak, Turkish,
  598. Traditional Chinese
  599. * Relative to 3.0development.8:
  600. * Only promote the Decentralized SSL Observatory to 5% of non-Tor users
  601. * Update the SSL Observatory whitelist of common cert chains
  602. * Fixes, mostly in the CDN/media playback department:
  603. Akamai/CNN, GO.com/ABC, AWS/Amazon Zeitgeist MP3 player,
  604. AWS/Spiegel.tv, Technology Review, Cloudfront/Tunein,
  605. Akamai/Discovery Channel, Beyond Security, OCaml, Gentoo,
  606. Nokia, Widgetbox.com, Squarespace
  607. https://trac.torproject.org/projects/tor/ticket/4199
  608. https://trac.torproject.org/projects/tor/ticket/6871
  609. https://trac.torproject.org/projects/tor/ticket/6992
  610. https://trac.torproject.org/projects/tor/ticket/7000
  611. https://trac.torproject.org/projects/tor/ticket/7020
  612. https://mail1.eff.org/pipermail/https-everywhere-rules/2012-October/001324.html
  613. * Disable buggy: Web.de, AJC.com, Feross, Bestofmedia
  614. * Remove a lot of off-by-default rulesets from the code, since they have
  615. some costs in terms of startup speed and RAM usage
  616. 3.0development.8 (2012-10-03)
  617. * 3.0 stable release candidate 1
  618. * Fixes: AOL, 1and1 Internet, American Physical Society, Antispam.de, BBC,
  619. Baker and Taylor, Barnes and Noble, BitTorrent, CacheFly,
  620. CheezBurger, Cleverbridge, Cloudfront, Facebook, Trustguard,
  621. IEEE, Link Plus Catalog, Microsoft, Mozilla, News Corp, Nrelate,
  622. OpenDNS, PassThePopcorn, Pidgin, Piriform, RFC Editor, Symantec,
  623. Telegraph, Transmission, Valve, Zenimax-Media,
  624. kirjoitusalusta.fi, uTorrent
  625. * Reenable: CodingTeam
  626. * Disable broken: GrooveShark, Gearhog, Paper.li, Soton.ac.uk, SVT.se
  627. * Various translation improvements
  628. * Support a new platform="mixedcontent" attribute
  629. * Switch to the actual HTTPS Everywhere logo for the context menu button
  630. chrome-2012.9.21
  631. * Workaround for breakage in Amazon Look Inside the Book (via Cloudfront)
  632. https://trac.torproject.org/projects/tor/ticket/6848
  633. * Replace jsURI with URI.js, fixing a number of bugs in the Chrome port
  634. - https://trac.torproject.org/projects/tor/ticket/6197
  635. - Also breakage on other random pages like
  636. http://venturebeat.com/2012/09/13/how-do-not-track-could-destroy-the-internet-as-you-know-it/
  637. * Fixes: AOL, Antispam.de, BBC, BitTorrent, Facebook, Gearhog, LinkPlus
  638. Catalog, Microsoft, Mother Jones, Mozilla, Office.co.uk, OpenDNS,
  639. PassThePopcorn, Piriform, WhatCD, uTorrent
  640. * Disable broken: Paper.li, SVT.se, Soton.ac.uk
  641. * Reenable: Referly
  642. chrome-2012.9.10
  643. * The "just add eleven" chromium alpha
  644. * Time to test the updating mechanism from direct -> Chrome Web Store
  645. installs
  646. * Ruleset changes in addition to those in FF 3.0dev7:
  647. * Fixes: News Corp, Cheezburger, CacheFly, Cleverbridge, Nrelate,
  648. Pidgin, Telegraph
  649. * Improvements: Global Marketing Strategies
  650. 3.0development.7 (2012-09-07)
  651. * Add a cleanup routine for profiles affected by a 2.2 defaults bug:
  652. https://mail1.eff.org/pipermail/https-everywhere/2012-August/001511.html
  653. * Make Decentralized SSL Observatory-Tor interactions saner in the wake of
  654. Torbutton transitioning to "always on" (we now detect a local Tor instance
  655. on port 9050 and use it)
  656. https://trac.torproject.org/projects/tor/ticket/6541
  657. * Fix some other bugs in the Observatory proxy-wrangling code
  658. * Disable broken/buggy rulesets: Voxel, Mapquest, Imgur, Justin.tv,
  659. F-Secure, Valve, SpringFiles, openDesktop, syllabushare, Playboy, FAZ
  660. * Fixes / Improvements: Eloqua, OpenDNS, Mashable, News Corp, Sony, Yahoo!,
  661. Examiner.com, FBI, Adtechus, Mozilla, Dreamhost, Lenovo / Thinkpad, Pirate
  662. Party, Scribd
  663. * New Czech translation
  664. 3.0development.6 (2012-08-16)
  665. * Prevent ruleset bugs from crashing the UI
  666. https://trac.torproject.org/projects/tor/ticket/6280
  667. * Fix a lack-of-translation bug in the context menu
  668. https://trac.torproject.org/projects/tor/ticket/6516
  669. (although coverage will probably be patchy for a while)
  670. * Add hooks to use our new Firefox internal rewrite API, if the browser
  671. has it (this should address
  672. https://trac.torproject.org/projects/tor/ticket/5477
  673. https://trac.torproject.org/projects/tor/ticket/3190
  674. )
  675. * Fixes: OpenStreetMap, Okcupid, Yandex, Valve, Atlantic Media, AWS,
  676. XDA developers, Tumblr, MetaPress, Mixpanel, VideoLAN, JBoss,
  677. Yourhosting, Pypi, QT, Imgur, Scientific American,
  678. Chronicle, ISOC, Wikimedia, Xmission, Tumblr, OpenDNS
  679. Mobygames, Telegraph Media, Dailymotion, RFC-editor, US gov,
  680. Discogs, Costco, Brightcove, PirateParty, BrownPaperTickets
  681. * Improvements: Apple, MIT
  682. * Disable buggy/broken: ZDNet, Globe and Mail, Malwarebytes, Plenty of Fish,
  683. Raymond.CC, Blip.tv, Governo Portugês, adf.ly,
  684. McAfee :( :( :(
  685. * New translations: Italian, Turkish, Traditional Chinese, Korean
  686. * Numerous updated translations
  687. chrome-2012.8.16
  688. * The "exponential bifurcation" alpha
  689. * Change the update URI to the specific one blessed by the Chrome Web Store
  690. (they tell us that, despite appearances, the request will actually be
  691. https)
  692. chrome-2012.8.15
  693. * The "Happiness in the Cloud" Alpha
  694. * We still suffer from the horrible Appcache bug, so this is still an alpha:
  695. https://trac.torproject.org/projects/tor/ticket/5585
  696. https://code.google.com/p/chromium/issues/detail?id=121325
  697. * Enslave ourselves to the Chrome Web Store, because Google has made it
  698. very tricky to install .crx files in Chrome version 21
  699. https://code.google.com/p/chromium/issues/detail?id=133818
  700. https://code.google.com/p/chromium/issues/detail?id=128748
  701. * Do a better job of displaying the context menu, especially for error pages:
  702. https://trac.torproject.org/projects/tor/ticket/6085
  703. (should be fixed for real this time)
  704. * Fancier Chrome context menus by Jay Weisskopf
  705. * Fixes: OpenStreetMap, Okcupid, Yandex, Valve, Atlantic Media, AWS,
  706. XDA developers, Tumblr, MetaPress, Mixpanel, VideoLAN, JBoss,
  707. Yourhosting, Pypi, QT, Imgur, Scientific American,
  708. Chronicle, ISOC, Wikimedia, Xmission, Tumblr, OpenDNS
  709. Mobygames, Telegraph Media, Dailymotion, RFC-editor, US gov,
  710. Discogs, Costco, Brightcove, PirateParty, BrownPaperTickets,
  711. * Improvements: Apple, MIT
  712. * Disable buggy/broken: ZDNet, Globe and Mail, Malwarebytes, Plenty of Fish,
  713. Raymond.CC, Blip.tv, Governo Portugês, adf.ly
  714. McAfee :( :( :(
  715. 3.0development.5 (2012-06-26)
  716. * Fix the enable/disable button in Firefox 15
  717. https://trac.torproject.org/projects/tor/ticket/6212
  718. * Fixes: GetFirebug, Gentoo, Ebay, Yandex (extensive), Maxmind, Blogger, HP,
  719. Jottit
  720. * Disable broken: Project Syndicate, Alton Towers, Network for Good
  721. https://trac.torproject.org/projects/tor/ticket/6222
  722. * The Decentralized SSL Observatory client now saves up some certificates if
  723. the network blocks or MITMs attempts to submit them.
  724. chrome-2012.6.21
  725. * The Autonomous Greenland Beta Release
  726. * Allow rulesets to be toggled when the page breaks completely
  727. https://trac.torproject.org/projects/tor/ticket/6085
  728. * Fixes: Github, Gentoo, HP, Maxmind, Orange
  729. * Disable broken: Alton Towers, Project Syndicate
  730. * Only ship 1 new ruleset (we're in a freeze)
  731. 3.0development.4 (2012-06-18)
  732. * Fix compatibility bug with Firefox 15:
  733. https://trac.torproject.org/projects/tor/ticket/5893
  734. * Ship 217 new rulesets (frozen; new rulesets now have to wait until 4.0
  735. development)
  736. * Fixes: numerous, including: Boxee, CiteULike, MozillaMessaging,
  737. Yandex, Demonoid, Pirate Party, Gentoo, NYTimes, Microsoft,
  738. Wikipedia, Lenovo, MyWOT
  739. https://trac.torproject.org/projects/tor/ticket/5912
  740. https://trac.torproject.org/projects/tor/ticket/6091
  741. https://trac.torproject.org/projects/tor/ticket/5703
  742. https://trac.torproject.org/projects/tor/ticket/5931
  743. https://trac.torproject.org/projects/tor/ticket/5958
  744. https://mail1.eff.org/pipermail/https-everywhere-rules/2012-June/001189.html
  745. https://mail1.eff.org/pipermail/https-everywhere-rules/2012-June/001190.html
  746. https://mail1.eff.org/pipermail/https-everywhere-rules/2012-May/001186.html
  747. https://mail1.eff.org/pipermail/https-everywhere/2012-May/001433.html
  748. * Disable broken: MarketWatch, Disqus, Magento, Lavasoft,
  749. Typepad/Say Media, Thomas Cook, Thomson Reuters clients,
  750. Science Daily, BinRev, Ikea, Interpol
  751. https://trac.torproject.org/projects/tor/ticket/5899
  752. https://trac.torproject.org/projects/tor/ticket/5496
  753. chrome-2012.6.18
  754. * The Divisible By Six Chromium Beta Release
  755. * Ship 444 new Rulesets
  756. * Fixes: numerous, including: Boxee, omgubuntu, Microsoft
  757. https://trac.torproject.org/projects/tor/ticket/5899
  758. https://trac.torproject.org/projects/tor/ticket/5703
  759. https://trac.torproject.org/projects/tor/ticket/5931
  760. https://trac.torproject.org/projects/tor/ticket/5958
  761. * Disable broken: Disqus, uTorrent, Thomas Cook, Thomson Reuters clients,
  762. Science Daily, Say Media, BinRev, Ikea, Interpol
  763. * Not fixed:
  764. The horrible appcache / CSS bug:
  765. https://trac.torproject.org/projects/tor/ticket/5585
  766. Occasional extension compatibility glitches:
  767. https://trac.torproject.org/projects/tor/ticket/5731
  768. 3.0development.3 (2012-05-11)
  769. * Ship 361 new rulesets
  770. * Do a better job of disabling CACert rulesets by default on non-CAcert
  771. platforms
  772. * Fix for compatibility with some other Firefox extensions:
  773. https://trac.torproject.org/projects/tor/ticket/5682
  774. * Fixes: Wordpress stylesheets, USENIX, Mozilla, Opera, Valve, and many
  775. others
  776. https://mail1.eff.org/pipermail/https-everywhere-rules/2012-April/001105.html
  777. https://trac.torproject.org/projects/tor/ticket/5831
  778. * Disable broken: Pandora, Miranda IM, Pastebin.ca
  779. https://trac.torproject.org/projects/tor/ticket/5804
  780. https://trac.torproject.org/projects/tor/ticket/5776
  781. * Testing our new more automated release process
  782. chrome-2012.5.1
  783. * The May Day Chromium Beta Release
  784. * Ship 886 new rulesets (thanks mostly to Negres!)
  785. * Fix two downgrade attacks that might allow attackers to deny HTTPS
  786. Everywhere protection for cookies on some domains.
  787. https://trac.torproject.org/projects/tor/ticket/5676
  788. https://trac.torproject.org/projects/tor/ticket/2199
  789. * More efficient ruleset storage shrinks the .crx download by a factor of
  790. about 4 (thanks fauxfaux)
  791. https://trac.torproject.org/projects/tor/ticket/5275
  792. * Disable buggy rulesets: IBM, Scribd, Wunderground, ReadWriteWeb,
  793. Pastebin.ca
  794. https://trac.torproject.org/projects/tor/ticket/5344
  795. https://trac.torproject.org/projects/tor/ticket/5435
  796. https://trac.torproject.org/projects/tor/ticket/5630
  797. * Ruleset fixes: Debian, Kohls, Malwarebytes, Yandex, Wikipedia, Mises.org,
  798. OpenDNS, Wizards of the Coast, Lenovo, Barnes and Noble,
  799. Pastebin.ca
  800. https://trac.torproject.org/projects/tor/ticket/5509
  801. https://trac.torproject.org/projects/tor/ticket/5491
  802. https://trac.torproject.org/projects/tor/ticket/5303
  803. * Numerous other improvements, fixes, and exciting new bugs :)
  804. 3.0development.2 (2012-04-26)
  805. * License change: the tree now includes some code from Convergence, which
  806. is GPL v3+. Other code remains licensable as GPLv2+
  807. * Ship 696 new rulesets (!!!), thanks to a lot of amazing work by Negres
  808. * Fix a downgrade attack that might allow attackers to deny HTTPS
  809. Everywhere protection for cookies on some domains.
  810. https://trac.torproject.org/projects/tor/ticket/5676
  811. * Fix a weird wrong DOM-origin bug that occurred while redirects were in
  812. progress (this might have security implications, although we are unsure
  813. if it was exploitable).
  814. https://trac.torproject.org/projects/tor/ticket/5477
  815. * Ruleset fixes: Debian, Kohls, Malwarebytes, Yandex, Wikipedia, Mises.org,
  816. OpenDNS, Wizards of the Coast, Lenovo, Barnes and Noble
  817. https://trac.torproject.org/projects/tor/ticket/5509
  818. https://trac.torproject.org/projects/tor/ticket/5491
  819. https://trac.torproject.org/projects/tor/ticket/5303
  820. * Stumble across more horrible security holes in the Verizon website:
  821. https://mail1.eff.org/pipermail/https-everywhere-rules/2012-February/001003.html
  822. * Disable the Gentoo ruleset on non-CAcert platforms
  823. * Disable buggy rulesets: IBM, Scribd, Wunderground, ReadWriteWeb :( :( :(
  824. https://trac.torproject.org/projects/tor/ticket/5344
  825. https://trac.torproject.org/projects/tor/ticket/5435
  826. https://trac.torproject.org/projects/tor/ticket/5630
  827. * Better cohabitation between the Decentralized SSL Observatory and
  828. Convergence
  829. * Separate Observatory option to control self-signed cert submission
  830. * Numerous other ruleset enhancements, fixes, and probably exciting new bugs
  831. in Negres's ruleset changes
  832. 3.0development.1 (2012-03-14)
  833. * By default, use https://google.co.cctld instead of
  834. encrypted.google.com
  835. https://trac.torproject.org/projects/tor/ticket/5152
  836. * Add an optional ruleset to use https://www.google.com
  837. instead of encrypted.google.com, too
  838. * Add a new context menu in the rulesets list:
  839. - toggle a ruleset
  840. - reset it to the default
  841. https://trac.torproject.org/projects/tor/ticket/3762
  842. - view the ruleset source
  843. https://trac.torproject.org/projects/tor/ticket/5237
  844. * Show the Observatory popup to all users once, not just TorButton users
  845. * Four new translations: Basque, French, Polish, Slovak
  846. * Ship 125 new rulesets
  847. chrome-2012.3.14
  848. * Ship 109 new rulesets since the last Chromium release
  849. * Add an optional ruleset to search on https://www.google.com
  850. instead of encrypted.google.com
  851. * Switch non-US google searches to country sites by default
  852. * Better chrome context UI
  853. 2.2.3 (2012-09-25)
  854. * Workaround for breakage in Amazon Look Inside the Book (via Cloudfront)
  855. https://trac.torproject.org/projects/tor/ticket/6848
  856. * Fix logout for AOL users
  857. * Other fixes: PassThePopcorn, WhatCD, Antispam.de, RFCeditor,
  858. Weatherspark / GoogleMaps
  859. * Disable broken: SVT.se
  860. 2.2.1 (2012-08-17)
  861. * Fix a configuration-parsing bug in 2.2 that would
  862. ignore default_off rules if this was a first install
  863. https://mail1.eff.org/pipermail/https-everywhere/2012-August/001511.html
  864. * Add a cleanup routine for profiles affected by that bug.
  865. 2.2 (2012-08-15)
  866. * Prevent ruleset bugs from crashing the UI
  867. https://trac.torproject.org/projects/tor/ticket/6280
  868. * Fix the enable/disable button in Firefox 14
  869. https://trac.torproject.org/projects/tor/ticket/6212
  870. * Fix a nasty bug in the optional "Search www.google.com" ruleset:
  871. https://gitweb.torproject.org/https-everywhere.git/commitdiff/50ca41a1e189ef8383781f803e51ec7a06688a3b
  872. * Disable buggy/broken: ZDNet, Globe and Mail, Blip.tv, Governo Portugês,
  873. Alton Towers, McAfee :( :( :(
  874. * Fixes: Yandex, Wikipedia, PirateParty, JBoss, Gentoo
  875. * Hopefully the last 2.x release before 3.0 stable
  876. 2.1 (2012-06-18)
  877. * Fix context menu breakage when URIs lack a host
  878. * Fixes: CiteULike, MozillaMessaging, Yandex, Demonoid, Pirate Party,
  879. Gentoo, NYTimes, Microsoft, Wikipedia, Lenovo
  880. https://mail1.eff.org/pipermail/https-everywhere-rules/2012-June/001189.html
  881. https://trac.torproject.org/projects/tor/ticket/6091
  882. https://mail1.eff.org/pipermail/https-everywhere-rules/2012-June/001190.html
  883. https://mail1.eff.org/pipermail/https-everywhere-rules/2012-May/001186.html
  884. https://mail1.eff.org/pipermail/https-everywhere/2012-May/001433.html
  885. * Disable broken: MarketWatch, Disqus, Magento, Lavasoft, Project Syndicate,
  886. Typepad/Say Media
  887. https://trac.torproject.org/projects/tor/ticket/5899
  888. https://trac.torproject.org/projects/tor/ticket/5496
  889. 2.0.5 (2012-05-16)
  890. * Rebuild 2.0.4 without a bug in the release scripts that prevented all the
  891. rulesets from being absent
  892. 2.0.4 (2012-05-16)
  893. * Fix for compatibility with some other Firefox extensions:
  894. https://trac.torproject.org/projects/tor/ticket/5682
  895. * Fixes: Wordpress stylesheets, USENIX, Mozilla, Opera, Indymedia
  896. https://trac.torproject.org/projects/tor/ticket/5905
  897. https://mail1.eff.org/pipermail/https-everywhere-rules/2012-April/001105.html
  898. * Disable broken: Pandora, Miranda IM, Pastebin.ca, PaidContent
  899. https://trac.torproject.org/projects/tor/ticket/5804
  900. https://trac.torproject.org/projects/tor/ticket/5776
  901. 2.0.3 (2012-04-26)
  902. * Fix a downgrade attack that might allow attackers to deny HTTPS
  903. Everywhere protection for cookies on some domains.
  904. https://trac.torproject.org/projects/tor/ticket/5676
  905. * Minor redirection mechanism fixes
  906. * Fixes: WordPress, Yandex, OpenDNS, Via.me/AWS
  907. * Improvements: Mozilla
  908. * Disable broken: ReadWriteWeb
  909. 2.0.2 (2012-04-19)
  910. * Fix a weird wrong DOM-origin bug that occurred while redirects were in
  911. progress (this might have security implications, although we are unsure
  912. if it was exploitable).
  913. https://trac.torproject.org/projects/tor/ticket/5477
  914. * By default, use https://google.co.cctld instead of
  915. encrypted.google.com
  916. https://trac.torproject.org/projects/tor/ticket/5152
  917. * Add an optional ruleset to use https://www.google.com
  918. instead of encrypted.google.com, too
  919. * Ruleset fixes: Debian, Kohls, Malwarebytes, Yandex, Wikipedia, Mises.org,
  920. OpenDNS, Wizards of the Coast, Lenovo, Barnes and Noble
  921. https://trac.torproject.org/projects/tor/ticket/5509
  922. https://trac.torproject.org/projects/tor/ticket/5491
  923. https://trac.torproject.org/projects/tor/ticket/5303
  924. * Stumble across more horrible security holes in the Verizon website:
  925. https://mail1.eff.org/pipermail/https-everywhere-rules/2012-February/001003.html
  926. * Disable the Gentoo ruleset on non-CAcert platforms
  927. * Disable buggy rulesets: IBM, Scribd, Wunderground :( :( :(
  928. https://trac.torproject.org/projects/tor/ticket/5344
  929. https://trac.torproject.org/projects/tor/ticket/5435
  930. https://trac.torproject.org/projects/tor/ticket/5630
  931. 2.0.1 (2012-02-27)
  932. * 2.0 is now Stable!
  933. * Fix tiny settings window on some versions of Windows:
  934. https://trac.torproject.org/projects/tor/ticket/5197
  935. * Fix drop down menu bug for the non-English versions of the UI
  936. * Added Farsi and Arabic translations
  937. * Disable Netflix, which was demonstrating a lot of breakage
  938. * Improvements: Wi

Large files files are truncated, but you can click here to view the full file