Claude
8214afee1e
The stored apiUrl was required to already carry the `/api` suffix, since
api.js builds requests as `${baseUrl}/credentials`. The options label read
"FC base URL", so entering the instance root -- the natural reading --
sent every request one path segment short: POST /credentials hit the Vue
SPA catch-all and came back 405, and GET /extension/manifest 404'd.
Worse, Test Connection reported success on it: the catch-all answers GET
/credentials with 200 HTML, so `r.ok` was true and the only affordance
meant to catch this misconfiguration actively masked it.
Normalize instead of validate (rules 92, 26):
- New lib/url.js: normalizeApiUrl / webRootFromApiUrl, one source shared
by the background client and the options page. Accepts either the
instance root or the API root.
- api.js normalizes on read, so configs already stored in the broken form
heal themselves without the operator reopening Settings.
- options.js stores the canonical form, echoes back what it saved, and
the test now asserts a JSON content-type -- killing the false green.
- 404/405 in request() now names the URL and points at the setting.
- Options label/placeholder state that both forms work.
Version 1.0.9 -> 1.0.10 in BOTH manifest.json and package.json; build.yml
resolves the release version from package.json, and a stale value there
would hit the cached ext-1.0.9 asset and republish the old XPI unsigned
against the new code.
Refs #2393
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
78 lines
2.1 KiB
JSON
78 lines
2.1 KiB
JSON
{
|
|
"manifest_version": 3,
|
|
"name": "FabledCurator",
|
|
"version": "1.0.10",
|
|
"description": "Export cookies from supported platforms to FabledCurator and add creators as sources in one click.",
|
|
|
|
"browser_specific_settings": {
|
|
"gecko": {
|
|
"id": "fabledcurator@fabledsword.com",
|
|
"strict_min_version": "115.0"
|
|
}
|
|
},
|
|
|
|
"content_security_policy": {
|
|
"_comment": "Override the MV3 default CSP to OMIT upgrade-insecure-requests. FC runs over plain HTTP per the homelab posture (feedback_homelab_http), and the default MV3 CSP would silently upgrade every fetch(http://curator.../...) to https:// and fail with NS_ERROR_GENERATE_FAILURE. Operator-flagged 2026-05-26 after the 'Test connection' button errored despite a working CORS preflight on the backend.",
|
|
"extension_pages": "script-src 'self'; object-src 'self';"
|
|
},
|
|
|
|
"permissions": [
|
|
"cookies",
|
|
"storage",
|
|
"tabs",
|
|
"activeTab",
|
|
"webRequest",
|
|
"webRequestBlocking",
|
|
"alarms"
|
|
],
|
|
|
|
"host_permissions": [
|
|
"*://*.patreon.com/*",
|
|
"*://*.subscribestar.com/*",
|
|
"*://*.subscribestar.adult/*",
|
|
"*://*.hentai-foundry.com/*",
|
|
"*://*.discord.com/*",
|
|
"*://*.pixiv.net/*",
|
|
"*://*.deviantart.com/*",
|
|
"*://app-api.pixiv.net/*",
|
|
"*://oauth.secure.pixiv.net/*",
|
|
"*://*/*"
|
|
],
|
|
|
|
"action": {
|
|
"default_popup": "popup/popup.html",
|
|
"default_icon": "icons/icon.svg",
|
|
"default_title": "FabledCurator"
|
|
},
|
|
|
|
"background": {
|
|
"scripts": ["lib/platforms.js", "lib/cookies.js", "lib/url.js", "lib/api.js", "background/background.js"]
|
|
},
|
|
|
|
"options_ui": {
|
|
"page": "options/options.html",
|
|
"browser_style": true
|
|
},
|
|
|
|
"content_scripts": [
|
|
{
|
|
"matches": [
|
|
"*://*.patreon.com/*",
|
|
"*://*.subscribestar.com/*",
|
|
"*://*.subscribestar.adult/*",
|
|
"*://*.hentai-foundry.com/*",
|
|
"*://*.deviantart.com/*",
|
|
"*://*.pixiv.net/*"
|
|
],
|
|
"js": ["lib/platforms.js", "content/content-script.js"],
|
|
"css": ["content/content-script.css"],
|
|
"run_at": "document_idle"
|
|
}
|
|
],
|
|
|
|
"icons": {
|
|
"48": "icons/icon.svg",
|
|
"96": "icons/icon.svg"
|
|
}
|
|
}
|