challenge-bypass-extension

PrivacyPass Extension v3.0.6

What's Changed

• Remove param r in tests by @armfazh in https://github.com/privacypass/challenge-bypass-extension/pull/388
• Bump webpack from 5.72.1 to 5.76.1 by @dependabot in https://github.com/privacypass/challenge-bypass-extension/pull/390
• Bump word-wrap from 1.2.3 to 1.2.4 by @dependabot in https://github.com/privacypass/challenge-bypass-extension/pull/396
• Fix Cloudflare tokens issuance domain by @thibmeu in https://github.com/privacypass/challenge-bypass-extension/pull/397
• Release v3.0.6 by @thibmeu in https://github.com/privacypass/challenge-bypass-extension/pull/398
• Small update of vuln lib before release 3.0.6 by @armfazh in https://github.com/privacypass/challenge-bypass-extension/pull/399

New Contributors

• @thibmeu made their first contribution in https://github.com/privacypass/challenge-bypass-extension/pull/397

Full Changelog: https://github.com/privacypass/challenge-bypass-extension/compare/v3.0.5...v3.0.6

What's Changed

• Bump loader-utils from 2.0.3 to 2.0.4 by @dependabot in https://github.com/privacypass/challenge-bypass-extension/pull/352
• Bump qs from 6.10.1 to 6.10.3 by @dependabot in https://github.com/privacypass/challenge-bypass-extension/pull/380
• Bump json5 from 2.2.1 to 2.2.3 by @dependabot in https://github.com/privacypass/challenge-bypass-extension/pull/383
• Fixes the removal of r param. by @armfazh in https://github.com/privacypass/challenge-bypass-extension/pull/387

Full Changelog: https://github.com/privacypass/challenge-bypass-extension/compare/v3.0.4...v3.0.5

What's Changed

• Support for hCaptcha was re-enabled.
• Bump terser from 4.8.0 to 4.8.1 by @dependabot in https://github.com/privacypass/challenge-bypass-extension/pull/340
• restore hCaptcha compatibility by @fedecarpy in https://github.com/privacypass/challenge-bypass-extension/pull/344
• Bump loader-utils from 2.0.2 to 2.0.3 by @dependabot in https://github.com/privacypass/challenge-bypass-extension/pull/349
• Updating readme.md by @armfazh in https://github.com/privacypass/challenge-bypass-extension/pull/350
• Releasing v3.0.4 by @armfazh in https://github.com/privacypass/challenge-bypass-extension/pull/351

New Contributors

• @fedecarpy made their first contribution in https://github.com/privacypass/challenge-bypass-extension/pull/344

Full Changelog: https://github.com/privacypass/challenge-bypass-extension/compare/v3.0.3...v3.0.4

What's Changed

• Support for hCaptcha challenges is paused after v3.x.x.
• Fixes some issues reported by linter. by @armfazh in https://github.com/privacypass/challenge-bypass-extension/pull/303
• Fixes vuln dependency in minimist by @armfazh in https://github.com/privacypass/challenge-bypass-extension/pull/313
• Adding issue templates. by @armfazh in https://github.com/privacypass/challenge-bypass-extension/pull/321
• Set strict node version support. by @armfazh in https://github.com/privacypass/challenge-bypass-extension/pull/323
• Update to v3 github actions. by @armfazh in https://github.com/privacypass/challenge-bypass-extension/pull/324
• Adding back license file. by @armfazh in https://github.com/privacypass/challenge-bypass-extension/pull/322
• Remove ts jest and freeze dependencies. by @armfazh in https://github.com/privacypass/challenge-bypass-extension/pull/327
• Implementing RSA blind signatures. by @armfazh in https://github.com/privacypass/challenge-bypass-extension/pull/328
• uses sjcl for base64url and byte encoding by @armfazh in https://github.com/privacypass/challenge-bypass-extension/pull/331
• Update Cloudflare request body params by @migueldemoura in https://github.com/privacypass/challenge-bypass-extension/pull/334
• Bump new version by @armfazh in https://github.com/privacypass/challenge-bypass-extension/pull/336

New Contributors

• @migueldemoura made their first contribution in https://github.com/privacypass/challenge-bypass-extension/pull/334

Full Changelog: https://github.com/privacypass/challenge-bypass-extension/compare/v3.0.2...v3.0.3

What's Changed

• Change cloudflare issue request flow by @ppopth in https://github.com/privacypass/challenge-bypass-extension/pull/292
• Bump follow-redirects from 1.14.7 to 1.14.8 by @dependabot in https://github.com/privacypass/challenge-bypass-extension/pull/301
• Update some dependencies. by @armfazh in https://github.com/privacypass/challenge-bypass-extension/pull/302
• Explicitly call perl for configuring sjcl library. by @armfazh in https://github.com/privacypass/challenge-bypass-extension/pull/304
• Update the body param by @ppopth in https://github.com/privacypass/challenge-bypass-extension/pull/308

Full Changelog: https://github.com/privacypass/challenge-bypass-extension/compare/v3.0.1...v3.0.2

What's Changed

• Support of hCaptcha under development.
• Adding github actions for running tests by @armfazh in https://github.com/privacypass/challenge-bypass-extension/pull/252
• Updating several dependencies with vulnerabilites by @armfazh in https://github.com/privacypass/challenge-bypass-extension/pull/251
• Removes non-used dependencies by @armfazh in https://github.com/privacypass/challenge-bypass-extension/pull/255
• Removes circelci script. by @armfazh in https://github.com/privacypass/challenge-bypass-extension/pull/268
• Adding a badge. by @armfazh in https://github.com/privacypass/challenge-bypass-extension/pull/270
• v3-rc into master by @ppopth in https://github.com/privacypass/challenge-bypass-extension/pull/276
• Resolve path correctly. by @armfazh in https://github.com/privacypass/challenge-bypass-extension/pull/285
• Update follow-redirect vuln dependency. by @armfazh in https://github.com/privacypass/challenge-bypass-extension/pull/284
• i18n AMO link by @Gitoffthelawn in https://github.com/privacypass/challenge-bypass-extension/pull/287
• Updates some dependencies. by @armfazh in https://github.com/privacypass/challenge-bypass-extension/pull/290
• Target CI job to main branch. by @armfazh in https://github.com/privacypass/challenge-bypass-extension/pull/289
• Bumps nanoid vulnerable dependency. by @armfazh in https://github.com/privacypass/challenge-bypass-extension/pull/288

New Contributors

• @Gitoffthelawn made their first contribution in https://github.com/privacypass/challenge-bypass-extension/pull/287

Full Changelog: https://github.com/privacypass/challenge-bypass-extension/compare/v3.0.0...v3.0.1

What's Changed

• Support of hCaptcha under development.
• Adding github actions for running tests by @armfazh in https://github.com/privacypass/challenge-bypass-extension/pull/252
• Updating several dependencies with vulnerabilites by @armfazh in https://github.com/privacypass/challenge-bypass-extension/pull/251
• Removes non-used dependencies by @armfazh in https://github.com/privacypass/challenge-bypass-extension/pull/255
• Update v3 README.md file by @ppopth in https://github.com/privacypass/challenge-bypass-extension/pull/264
• Update installation instructions by @ppopth in https://github.com/privacypass/challenge-bypass-extension/pull/267

Full Changelog: https://github.com/privacypass/challenge-bypass-extension/compare/v2.0.9...v3.0.0

Changes:

• Fixed bug in hCaptcha urls
• Use webcrypto randomness
• Updating dependencies

• Fixes to fully integrate with CF's usage of hCaptcha on challenge pages.
• Adds the ability to present signed patches for running configurations from the external ec-commitments. Works similarly to how key commitments are retrieved.
• Redesign pop-up to show passes available for both CF and hCaptcha.

Cloudflare configuration needed to be updated to look for additional request identifiers.

The URL used by Cloudflare for token issuances changed and so Privacy Pass issuance data was no longer included in requests to the Cloudflare network. This release includes a fix that checks for the new URL.

• Compatibility fixes for hCaptcha redemption

Some minor compatibility fixes for HC config

• Fixed verification of DLEQ proofs.
• Build using yarn.
  • Using Jest testing framework for unit/integration tests.
• Elliptic curve optimizations.
  • Implementation of simplified SWU compliant with draft-irtf-cfrg-hash-to-curve-03.
  • allow client to specify which has-to-curve algorithm to use.
  • allow client to use compressed or uncompressed representations when encoding points.
• Configuration of workflow using central configuration file (src/ext/config.js).
  • Allows us to specify new workflows for different providers (see hCaptcha).
• VOPRF key commitments have been moved to external repo.
  • Allows key rotation to be performed separately from extension update.
  • Commitments contain signature which is verified and expiry date.
• Fixed some minor issues when redirecting in Chrome.
• Update popup window
  • Allow valid redemption tokens to be logged to console
  • Indicate version in HTML
• Update manifest version to 2.0.0