Log in
Add-on icon

Parcel version history - 7 versions

Parcel by Erayd, Max Baz

0 Stars out of 5
5
0
4
0
3
0
2
0
1
0
Parcel version history - 7 versions

  • Be careful with old versions! These versions are displayed for testing and reference purposes.You should always use the latest version of an add-on.

  • Latest version

    Version 1.0.6

    Released 19 Aug 2026 - 1.43 MB
    Works with firefox 126.0 and later
    • Further lifecycle changes
    • Add multi-sig for host distribution
    • Tighter restriction on passkeyDir
    • Add --delete to Makefile rsync
    • Info fixes from #127
    • Add v1.0.5 release review
    • Add TODO comment tracking
    • Further lifecycle changes
    • Fix passwordless (discoverable) passkey logins
    • Allow @ in passkey filenames
    • Handle passkey auth in cross-origin frames
    • Document anti-phishing search
    • Request all-sites permission on Firefox
    • Add HTTP authentication interception
    • Add a dedicated card class for credit/debit card entries
    • Fix VALIDSIG injection vulnerability in bootstrap host

    Source code released under ISC Licence

    Download Firefox and get the extension
    Download file

  • Older versions

    Version 1.0.5

    Released 7 Aug 2026 - 1.43 MB
    Works with firefox 109.0a1 and later
    • Constitutional amendment to allow non-sensitive state file
    • Normalise TOTP secrets (fixes #113)
    • Implement missing shadow enforcement
    • Add additional TOTP selector
    • Persist rate-limiter bucket state
    • Lifecycle improvements
    • Track frame origin & use for fill verification
    • Check for literal "null" in token var
    • Ensure that the bucket params are numeric
    • Clean up handling of host exit codes
    • Catch desync TOCTOU
    • Pin gitleaks
    • Add additional security review by Kimi K3
    • Strict validation for state file content
    • Reorganise security reviews
    • Add security review prompt

    Source code released under ISC Licence

    Download file

  • Version 1.0.4

    Released 1 Aug 2026 - 1.42 MB
    Works with firefox 109.0a1 and later
    • Fix popup appearing on submit button clicks
    • Add passkey (FIDO2/WebAuthn) support
    • Cache per-entry SHA-256 path hashes in search
    • Fix popup appearing on submit button clicks
    • Validate origin on fallback fill
    • Surface actual host errors instead of timeout when native host dies unexpectedly
    • Reject pending call in agent.js
    • Document how to use Parcel with snap & flatpak browsers
    • Fix GPG signature verification on systems with keyboxd (GnuPG 2.4+)
    • Add additional security review by GLM-5.2

    Source code released under ISC Licence

    Download file

  • Version 1.0.3

    Released 20 Jul 2026 - 1.4 MB
    Works with firefox 109.0a1 and later
    Fix infinite loop when .parcel.json is missing by @erayd in #100
    Add webstore install links to README by @erayd in #93
    Add example native-messaging host manifests for Chrome and Firefox by @erayd in #94
    Fix schema mutation on integer validation by @erayd in #95
    Document TOTP / 2FA feature in README by @erayd in #96
    Fix gitleaks by @erayd in #97

    Source code released under ISC Licence

    Download file

  • Version 1.0.2

    Released 15 Jul 2026 - 1.4 MB
    Works with firefox 109.0a1 and later
    Update JSDoc comments by @erayd in #59
    Skip empty lines (fixes test hang in docker) by @erayd in #60
    Skip permission test if root (docker compat.) by @erayd in #61
    Fix flaky rate-limit test by @erayd in #62
    Add gitleaks config by @erayd in #63
    ESLint compliance changes (no changes to logic) by @erayd in #64
    ESLint compliance changes - test suite (no changes to logic) by @erayd in #66
    Add and enforce ESLint by @erayd in #65
    Add MV3 service-worker lifecycle hooks for native host reconnection by @erayd in #67
    Add CSP directives to enforce no-network for extension pages by @erayd in #68
    Restrict decrypt/match to authorised popup ports (M3) by @erayd in #69
    Hash exact script bytes in HOST_HASH verification by @erayd in #71
    Support nested shadow roots (fixes #76) by @erayd in #77
    Make inline popup preserve focus by @max-baz in #73
    Type plaintext line number to fill from context-popup detail view by @erayd in #78
    Replace stale broadcast token by @erayd in #80
    Improve shadow DOM support by @erayd in #84
    Handle blacklisted target errors by @erayd in #85
    Fix port races & stale port recovery by @erayd in #86
    Add additional security review by GLM-5.2 by @erayd in #70
    Add relatedNever selector option by @erayd in #88
    Debounce action_list by @erayd in #89
    Propagate init errors to the popup by @erayd in #90
    Add install-deps make target by @erayd in #91
    Update PSL
    Reduce WAR in manifest.json to minimum required to function
    Add regex gate on action names
    Move gpg $OUT error output from host to logfile-only
    Limit broadcast message scope
    Set logfile permissions to 0600 by default
    Update AGENTS.md instructions
    Add Docker testing option
    Fix JS strict mode
    Add the actual public key to ensure as consistent extension ID

    Source code released under ISC Licence

    Download file

  • Version 1.0.1

    Released 18 Jun 2026 - 1.39 MB
    Works with firefox 109.0a1 and later
    • Ensure that variable scoping does not suppress exit status
    • Don't allow control characters in audit log fields
    • Move sha256 setup below sourcing the parcelrc file
    • Enforce strict 0600 permissions on parcelrc
    • Remove garbage line from makefile release section
    • Guard against oversized or unset message length
    • Force output via stdout to guard against embedded filenames
    • Create a temporary keyring for signature verification
    • Add security review detail
    • Add manifest CSP
    • Tighter link traversal permissions

    Source code released under ISC Licence

    Download file

  • Version 1.0.0

    Released 14 Jun 2026 - 1.39 MB
    Works with firefox 109.0a1 and later

    Source code released under ISC Licence

    Download file