Releases: bogorad/openrouter-summarizer
Releases · bogorad/openrouter-summarizer
v3.9.42
OpenRouter Summarizer 3.9.41
What's New (since 3.8.6)
Security & Privacy
- Added stronger token protection: API keys are now consistently handled with encrypted local storage, payload validation, and safer migration/rollback behavior.
- Hardened HTML rendering and sanitization in chat/summary flows to block unsafe injection paths and prevent XSS.
- Removed unsafe anchor URL handling in rendered content and enforced safer sanitization defaults.
- Added manifest Content Security Policy and reduced extension-host permission surface for least-privilege operation.
- Improved request safety with token/URL validation, input limits for content processing, and safer logging that redacts sensitive data.
Reliability & Stability
- Centralized logging and error handling with reusable
LoggerandErrorHandlerpatterns. - Fixed race conditions and message-channel edge cases (
return trueflow, port lifecycle handling). - Reduced runtime leak risk by tightening AbortController lifecycle and listener cleanup, including highlighter and popup/icon states.
- Added robust Web Crypto compatibility checks so missing
crypto.subtleenvironments fail gracefully.
UI, Workflow, and Feature Polish
- Restored and stabilized Joplin integration visibility with background-side token retrieval in content-script flows.
- Improved selection UX: cleaner deselection behavior, less scroll jumping, Shadow DOM interaction fixes, and clipboard formatting fidelity.
- Expanded Options/page interactions: updated model management flow, compact model UI layout, improved accessibility and keyboard support.
- Upgraded summary and chat ergonomics with clearer model naming, improved notifications, and language/model fallback resiliency.
Other Improvements
- Added CSP-safe DOM flow, DoS guardrails, and data-cleaning boundaries for selected-content payloads.
- Refined infrastructure and workflow support (beads tracking metadata and build/dependency housekeeping) while keeping user-visible behavior stable.
cosmetic fixes
3.8.6 no need for wrangler
3.8.3 - sanitize html, convert to maskdown and back before sharing
v3.8.3: Enhanced NewsBlur integration with two-stage cleaning and com…
max_tokens=4096 to OR call in `chat` so that more expensive models don't fail.
3.7.10 3.7.10 - max_tokens in chat