New Update NoScript Security Suite

Version 13.6.16 (released for Chrome)
v 13.6.16
============================================================
x Remove sync fetching exception for network-served
embedding documents (thanks Security Research Labs for
report)
x [UX] Improved gesture calibration
x Prevent horizontal scrolling caused by options tab panels
x Reduce console spam on startup
x [A11y] Fix aria-expanded management for customizable
presets
x [L10n] Updated bn, fi, fr, ja, ru, tr, zh_Hans from
Localization Lab
x [XSS] Updated IC_EVENT_PATTERN
x [UX] Improved rendering and tab-switching performance for
very large site lists
x Fix container options still shown if "Enable support for
containers tabs" is unchecked=
x [Containers] Make Default policy label in options
localizable (thanks fatboy for report)
x Restore README.md logo image lost during webp migration
(73d6ed0) (#545)
x [L10n] Updated bn, de, ru from Localization Lab
x Translations update from Localization Lab (#542)
x [Containers] Gracefully degrade when containers are
disabled by browser options
x [UX][Containers] UI integration
x Enable container support (Firefox pre-releases only)
x Add support for container tabs (#218, thanks to
@aaronkollasch for this huge contribution)
x Slight policy fetching optimization in edge cases
x [nscl] Fix frozen srcdoc frames having "null" as their
content
x [nscl] Improved attributes freezing (thanks Security
Research Labs for report)
x [build] Local github release automation script
x Better changelog formatting in release management action
x Fix release management action always using HEAD
x Consider wss: in secure protocol checks (thanks barbaz for
reporting)
x [Android] Fireproof UI tab closing
x [nscl] Fix dead objects interfering with window.event
patch
x [nscl] Consider wss: in SecureDomainKey checks
x Add missing license information
x Remove "fetch" capability from DEFAULT preset unless
"script" is there too (thanks Security Research Labs for
suggestion)
x Block websocket connections where the fetch capability is
disabled (thanks Security Research Labs for report)
x Improved origin normalization for sandboxed content
(thanks Security Research Labs for report)
 
Version 13.6.18 (released for Chrome)
v 13.6.18
============================================================
x [nscl] [Chromium] Work-around for restrictive CSP breaking
inline blob:/data: worker patches
x Short-circuit on internal URIs


v 13.6.17
============================================================
x [XSS] Updated IC_EVENT_PATTERN
x Improve compatibility across extensions reusing SyncMessage (issue #548)
 
Version 13.6.16 (released for Firefox)
v 13.6.16

x Remove sync fetching exception for network-served
embedding documents (thanks Security Research Labs for
report)
x [UX] Improved gesture calibration
x Prevent horizontal scrolling caused by options tab panels
x Reduce console spam on startup
x [A11y] Fix aria-expanded management for customizable
presets
x [L10n] Updated bn, fi, fr, ja, ru, tr, zh_Hans from
Localization Lab
x [XSS] Updated IC_EVENT_PATTERN
x [UX] Improved rendering and tab-switching performance for
very large site lists
x Fix container options still shown if "Enable support for
containers tabs" is unchecked=
x [Containers] Make Default policy label in options
localizable (thanks fatboy for report)
x Restore README.md logo image lost during webp migration
(73d6ed0) (#545)
x [L10n] Updated bn, de, ru from Localization Lab
x Translations update from Localization Lab (#542)
x [Containers] Gracefully degrade when containers are
disabled by browser options
x [UX][Containers] UI integration
x Enable container support (Firefox pre-releases only)
x Add support for container tabs (#218, thanks to
@aaronkollasch for this huge contribution)
x Slight policy fetching optimization in edge cases
x [nscl] Fix frozen srcdoc frames having "null" as their
content
x [nscl] Improved attributes freezing (thanks Security
Research Labs for report)
x [build] Local github release automation script
x Better changelog formatting in release management action
x Fix release management action always using HEAD
x Consider wss: in secure protocol checks (thanks barbaz for
reporting)
x [Android] Fireproof UI tab closing
x [nscl] Fix dead objects interfering with window.event
patch
x [nscl] Consider wss: in SecureDomainKey checks
x Add missing license information
x Remove "fetch" capability from DEFAULT preset unless
"script" is there too (thanks Security Research Labs for
suggestion)
x Block websocket connections where the fetch capability is
disabled (thanks Security Research Labs for report)
x Improved origin normalization for sandboxed content
(thanks Security Research Labs for report)
 
Version 13.6.19 (released for Firefox)
v 13.6.19

x [UX][Android] Auto-size gesture label
x [UX][Android] Adapt automatically to bigger font sizes (issue #503)
x [L10n] Updated it from Localization Lab
x [UX] Fix wss: URLs being styled as unsafe (issue #551)
x Fixed race condition causing intermittent Cloudflare challenges failures (issue #549)
x [nscl] Handle RFC 4291 (thanks Security Research Labs for report)
x [TabGuard] Avoid function serialization pitfalls (thanks Security Research Labs for report)
x [TabGuard] Fix wrong key used in redundancy optimization
 
Version 13.6.20 (released for Chrome)
v 13.6.20
============================================================
x [Android] [UX] Fix closing site permissions UI reverts to
the wrong tab
x new translations from weblate (#561)
x Improved policy fetching
x Avoid contentScript.register() (see JShelter issue #175)
x [A11y] Honor prefers-reduce-motion (issue #560)
x [XSS] Updated IC_EVENT_PATTERN
x [L10n] Updated ko from Localization Lab
x [l10n] Created empty ko localization
x [XSS] Updated IC_EVENT_PATTERN
x [UX][Android] Prevent site label truncation (issue #503)
x Reduce page layout disruption from placeholders
 
Version 13.6.23 (released for Firefox)
v 13.6.23
x [nscl] Improve DocStartInjection transition management


v 13.6.20
x [Android] [UX] Fix closing site permissions UI reverts to the wrong tab
x new translations from weblate (#561)
x Improved policy fetching
x Avoid contentScript.register() (see JShelter issue #175)
x [A11y] Honor prefers-reduce-motion (issue #560)
x [XSS] Updated IC_EVENT_PATTERN
x [L10n] Updated ko from Localization Lab
x [l10n] Created empty ko localization
x [XSS] Updated IC_EVENT_PATTERN
x [UX][Android] Prevent site label truncation (issue #503)
x Reduce page layout disruption from placeholders