What's Changed

• Update to our global eslint and other dependencies by @jonathanKingston in #274
• Bump express from 4.19.2 to 5.1.0 by @dependabot in #269
• Revert "Bump express from 4.19.2 to 5.1.0" by @jonathanKingston in #275
• Add uncommon URL escape sequence test page by @not-a-rootkit in #261
• Bump @duckduckgo/content-scope-scripts from 9.6.0 to 9.8.0 by @dependabot in #278

Full Changelog: 1.3.4...1.3.5

What's Changed

• Bump node-cmd from 4.0.0 to 5.0.0 by @dependabot in #160
• Bump eslint-plugin-html from 7.1.0 to 8.1.1 by @dependabot in #201
• Bump eslint-plugin-import from 2.28.0 to 2.30.0 by @dependabot in #221
• Bump express from 4.18.2 to 4.19.2 by @dependabot in #200
• Update all references for [Back] for Security Badware Pages by @not-a-rootkit in #222
• Add simple local port scanning page. by @kdzwinel in #227
• Introduce bounce tracking test page. by @kdzwinel in #229
• Fix first-party.site url on the bounce tracking page by @kdzwinel in #230
• Port scanning by @kdzwinel in #231
• Add support for wss in port scanning by @kdzwinel in #232
• Add BLOB file download by @miasma13 in #233
• Update C-S-S package to pull in latest webcompat tests by @dharb in #236
• Expand bounce tracking page to cookies by @kdzwinel in #237
• Bounce to https websites (only use http for testing). by @kdzwinel in #238
• Add support for complex path file downloading by @jonathanKingston in #240
• Add example malware page for testing malware protections. by @not-a-rootkit in #239
• Remove vox AMP test by @sammacbeth in #241
• Add Malware Download Test Page by @not-a-rootkit in #242
• Add address bar spoofing test by @not-a-rootkit in #243
• Fix address bar spoofing server routes by @not-a-rootkit in #244
• Malicious site protection edge cases by @kdzwinel in #249
• Add new cases to referrer trimming manual tests by @bwaresiak in #251
• Add a test page for CPM filterlist by @muodov in #248
• fix the back link in autoconsent index by @muodov in #252
• Fix typo in the autoconsent test by @muodov in #253
• Add malware href link to malware download test by @not-a-rootkit in #254
• Support pdf url filenames in download feature by @jonathanKingston in #256
• Add more advanced malware download test cases by @not-a-rootkit in #257
• [Autofill] Test pages for partial form saves by @dbajpeyi in #255
• [CODEOWNERS] Add global owners to all features by @dbajpeyi in #258
• Add priority calculation logic to reach calculator by @kzar in #259
• Add scam test pages by @not-a-rootkit in #260
• Updating to latest C-S-S tests by @jonathanKingston in #262
• [Autofill] New form with credit card inputs and various focus events by @dbajpeyi in #263
• chore: ignore index.html from codeowners by @dbajpeyi in #264
• Bump eslint-plugin-import from 2.30.0 to 2.31.0 by @dependabot in #234
• Bump eslint-plugin-html from 8.1.1 to 8.1.3 by @dependabot in #267
• Bump body-parser from 1.20.2 to 2.2.0 by @dependabot in #270
• Bump ws from 8.13.0 to 8.18.2 by @dependabot in #268
• Bump the eslint group with 2 updates by @dependabot in #271
• Revert "Bump the eslint group with 2 updates" by @jonathanKingston in #273

New Contributors

• @dbajpeyi made their first contribution in #255

Full Changelog: 1.3.3...1.3.4

What's Changed

• Update expected AMP redirection URL by @kzar in #220

Full Changelog: 1.3.2...1.3.3

What's Changed

• Create reach-calculator.html by @tagawa in #190
• Update reach-calculator.html by @tagawa in #191
• Update breakage reach calculator by @tagawa in #193
• Add website that auto-refreshes every 3 seconds by @bwaresiak in #192
• Update app scheme target to spreadprivacy. by @not-a-rootkit in #194
• Re-add js-page-rewrite into address bar spoofing issues. by @not-a-rootkit in #195
• Re-add js-page-rewrite to index page. by @not-a-rootkit in #196
• Favicon test pages by @federicocappelli in #198
• Bump eslint-plugin-import from 2.27.5 to 2.28.0 by @dependabot in #164
• Bump ws from 7.5.9 to 8.13.0 by @dependabot in #159
• Re-add content-scope-scripts by @jonathanKingston in #199
• Reach calculator: Improve reduction assumption explanation by @tagawa in #205
• Testing popup behavior and security and privacy issues by @mikamikem in #197
• Exempt Safari and WebKit-based DDG browsers from using serverTiming by @englehardt in #206
• Open details on ad click test page by default by @englehardt in #207
• Add URL canonicalization tests. by @not-a-rootkit in #208
• Add pages to simulate HTTP and WebView errors by @nshuba in #209
• Update vox amp link by @SlayterDev in #210
• Added clarification of the Severity Assessment Matrix section by @tagawa in #211
• create separate signup form for ui testing by @brindy in #213
• add manual increment button by @brindy in #216
• Add extra phishing detection test pages by @not-a-rootkit in #217
• Remove ampproject.org link from test page by @SlayterDev in #218
• Add expected pixels to ad click attribution test cases by @kzar in #219

New Contributors

• @tagawa made their first contribution in #190
• @federicocappelli made their first contribution in #198
• @mikamikem made their first contribution in #197
• @nshuba made their first contribution in #209

Full Changelog: 1.3.1...1.3.2

What's Changed

• Add print demo page by @jonathanKingston in #186
• Add same frame single page test by @jonathanKingston in #187
• Windows Browser: Script Injection test pages by @RendijsSmukulis in #185
• Add AMP loop protection page by @SlayterDev in #182
• Add autofill case with disabled inputs by @GioSensation in #189

Full Changelog: 1.3.0...1.3.1

What's Changed

• Add storage test for setting a cookie via the cookieStore API in a serviceworker by @sammacbeth in #166
• Update README.md by @kdzwinel in #167
• Add Address Bar Spoofing Test Cases by @not-a-rootkit in #169
• Rename js-page-rewrite, and unsupported application scheme. by @not-a-rootkit in #171
• Update links between security tests and reduce timeout on address bar spoofing via tel:// protocol. by @not-a-rootkit in #172
• Add ability to disable individual FP tests via url param. by @kdzwinel in #173
• Add test for surrogate included in head tag by @sammacbeth in #170
• Update download URL to include a HTTP redirect in spoof-js-download-url by @not-a-rootkit in #175
• Add password update flows by @GioSensation in #176
• Improve usability of the surrogate script test page by @kzar in #178
• Add local 301 redirect for address bar spoofing test case. by @not-a-rootkit in #179
• Move address bar spoofing server routes out of server.js by @not-a-rootkit in #180
• Add viewport test pages by @muodov in #177
• Rewrite download path URL to prevent URI clashes by @not-a-rootkit in #181
• Autofill shadow dom test page by @GioSensation in #183
• Autofill shadow dom follow up by @GioSensation in #184

New Contributors

• @not-a-rootkit made their first contribution in #169

Full Changelog: 1.2.2...1.3.0

What's Changed

• Add detection for WebMidi and Window Placement APIs by @muodov in #162
• Migrate app off glitch.me onto own hosted infra by @KeaganJarvis in #165
• Update AMP test page expected URL by @joshliebe in #168

New Contributors

• @KeaganJarvis made their first contribution in #165
• @joshliebe made their first contribution in #168

Full Changelog: 1.2.1...1.2.2

What's Changed

• Remove 404'd AMP link by @SlayterDev in #161
• Update AMP test page expected URL by @sammacbeth in #163

Full Changelog: 1.2.0...1.2.1

What's Changed

• Clear data page. by @kdzwinel in #107
• Bump node-cmd from 4.0.0 to 5.0.0 by @dependabot in #140
• Bump eslint-plugin-promise from 4.3.1 to 6.1.1 by @dependabot in #141
• Bump body-parser from 1.20.1 to 1.20.2 by @dependabot in #142
• Bump ws from 7.4.0 to 8.13.0 by @dependabot in #143
• Bump @duckduckgo/content-scope-scripts from 4.5.0 to 4.6.0 by @dependabot in #144
• Bump @duckduckgo/content-scope-scripts from 4.6.0 to 4.10.1 by @dependabot in #148
• Ignore scripts on install, move C-S-S to be a build dep by @jonathanKingston in #150
• Remove eslint-plugin-promise as is a conflicting peer dep by @jonathanKingston in #151
• Add anchors to ad click test cases by @englehardt in #153
• password generation test page by @szanto90balazs in #154
• Add support for ad cookie checking by @jonathanKingston in #158
• Bump @duckduckgo/content-scope-scripts from 4.11.1 to 4.13.0 by @dependabot in #157

Full Changelog: 1.1.0...1.2.0

What's Changed

• Update node and nvm by @jonathanKingston in #124
• Revert node version to 16 by @jonathanKingston in #125
• update site option test by @jdorweiler in #126
• fix mixed content by @jdorweiler in #127
• test page for API attribution by @muodov in #128
• AdClick tests to validate non-302 redirects by @RendijsSmukulis in #129
• Verifies basic runtime checking is enabled by @jonathanKingston in #131
• Expand element hiding privacy test page by @dharb in #130
• Shared content scope page tests also used for integration tests by @jonathanKingston in #132
• Bump eslint-plugin-html from 6.1.1 to 7.1.0 by @dependabot in #133
• Bump express from 4.17.1 to 4.18.2 by @dependabot in #135
• Install dependencies after deploy by @kdzwinel in #138
• Bump eslint-config-standard from 16.0.2 to 16.0.3 by @dependabot in #134
• Bump eslint from 7.20.0 to 7.32.0 by @dependabot in #136
• Bump eslint-plugin-import from 2.22.1 to 2.27.5 by @dependabot in #137

New Contributors

• @RendijsSmukulis made their first contribution in #129
• @dependabot made their first contribution in #133

Full Changelog: 1.0.0...1.1.0