Bump strict_min_version to 142.0 for data_collection_permissions
support, and replace all innerHTML usage with safe DOM APIs.
Assisted-by: Claude Code
Signed-off-by: Avinal Kumar <avinal.xlvii@gmail.com>
SVG source icon with generated PNGs at 48/96/128px. Add
browser_specific_settings with gecko ID for Firefox Add-ons.
Restrict CSP img-src to self and data URIs.
Assisted-by: Claude Code
Signed-off-by: Avinal Kumar <avinal.xlvii@gmail.com>
Add per-session nonce to all postMessage exchanges between content
script and iframe, use targeted origin instead of wildcard, add explicit
CSP to manifest. Group consecutive matched characters into single mark
elements to fix visual spacing.
Assisted-by: Claude Code
Signed-off-by: Avinal Kumar <avinal.xlvii@gmail.com>