[Pkg-mozext-commits] [noscript] 05/07: Refresh upstream changelog

[David Prévot]

This is an automated email from the git hooks/post-receive script.

taffit pushed a commit to branch master
in repository noscript.

commit d44a965bdfa6df6dea613f706b9cba9153b3fe5d
Author: David Prévot <taffit at debian.org>
Date:   Wed Apr 16 10:02:04 2014 -0400

    Refresh upstream changelog
---
 debian/upstream-changelog | 56 +++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 56 insertions(+)

diff --git a/debian/upstream-changelog b/debian/upstream-changelog
index 580832a..bc3fb44 100644
--- a/debian/upstream-changelog
+++ b/debian/upstream-changelog
@@ -1,5 +1,61 @@
 [+] new feature, [x] bug fix, [-] removed feature, [=] repackaging or cosmetic change
 
+v 2.6.8.20
+=========================================================================
+x Partially restored "Allow local links" functionality (works for HTML
+  file:// links but not for embedded resources and scripted loads)
++ "allowLocalLinks.from" about:config preference to define a whitelist
+  (in ABE URL pattern list syntax) which, if valid and not empty,
+  overrides the JavaScript whitelist which is reused by legacy default
+  for pages allowed to open file:// links (Gecko 28 and above)
++ "allowLocalLinks.to" about:config preference to define a whitelist
+  (in ABE URL pattern list syntax) which, if valid and not empty,
+  limits the file:// links which can be opened by allowed pages
+  (Gecko 28 and above)
+- Removed "Allow rich text copy and paste from external clipboard" option
+  from the UI if the browser doesn't support CAPS (Gecko 28 and above)
+x Implemented early permission changes enforcement on not yet reloaded
+  pages, to better match the old CAPS-based behavior (thanks therube
+  for reporting)
+x [Surrogates] Fixed Google Analytics surrogate breaking some javascript:
+  links (thanks Will for reporting)
+x [L18n] Fixed Finnish typo (thanks Kalle Niemitalo for reporting)
+x [XSS] Removed OAuth-triggered false positive (thanks Gunnar Scherf for
+  reporting)
+x [XSS] Stricter checks for HTTPS requests from a same domain origin with
+  different scheme (thanks LouiseRBaldwin for reporting)
+  
+v 2.6.8.20rc3
+=========================================================================
+x Partially restored "Allow local links" functionality (works for HTML
+  file:// links but not for embedded resources and scripted loads)
++ "allowLocalLinks.from" about:config preference to define a whitelist
+  (in ABE URL pattern list syntax) which, if valid and not empty,
+  overrides the JavaScript whitelist which is reused by legacy default
+  for pages allowed to open file:// links (Gecko 28 and above)
++ "allowLocalLinks.to" about:config preference to define a whitelist
+  (in ABE URL pattern list syntax) which, if valid and not empty,
+  limits the file:// links which can be opened by allowed pages
+  (Gecko 28 and above)
+- Removed "Allow rich text copy and paste from external clipboard" option
+  from the UI if the browser doesn't support CAPS (Gecko 28 and above)
+
+v 2.6.8.20rc2
+=========================================================================
+x Implemented early permission changes enforcement on not yet reloaded
+  pages, to better match the old CAPS-based behavior (thanks therube
+  for reporting)
+
+v 2.6.8.20rc1
+=========================================================================
+x [Surrogates] Fixed Google Analytics surrogate breaking some javascript:
+  links (thanks Will for reporting)
+x [L18n] Fixed Finnish typo (thanks Kalle Niemitalo for reporting)
+x [XSS] Removed OAuth-triggered false positive (thanks Gunnar Scherf for
+  reporting)
+x [XSS] Stricter checks for HTTPS requests from a same domain origin with
+  different scheme (thanks LouiseRBaldwin for reporting)
+  
 v 2.6.8.19
 =========================================================================
 x Fixed CAPS initialization broken in Gecko 27 and below

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-mozext/noscript.git