Enhance page source monitoring and threat response #112
Conversation
There was a problem hiding this comment.
Pull request overview
This PR enhances the security extension's page monitoring capabilities by adding source hash-based change detection and implementing a threat-triggered re-scan mechanism with progressive delays to catch late-loading malicious content.
Key changes:
- Implemented djb2-based hashing with intelligent sampling to efficiently detect page source changes
- Added automated re-scan scheduling when threats are detected, with progressive delays (800ms, 2000ms) and a maximum of 2 follow-up scans
- Integrated page source change detection into the rate limiting logic to avoid unnecessary re-scans when content hasn't actually changed
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
|
do not worry, I will squash and rebase if required... |
There was a problem hiding this comment.
Pull request overview
Copilot reviewed 32 out of 33 changed files in this pull request and generated 7 comments.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
There was a problem hiding this comment.
Pull request overview
Copilot reviewed 37 out of 38 changed files in this pull request and generated 5 comments.
Comments suppressed due to low confidence (1)
scripts/content.js:1713
- Unused variable result.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
Introduces full Firefox 109+ support, including new manifest, browser polyfill, and enterprise deployment via policies.json. Updates documentation to cover Firefox installation, deployment, and configuration. Adds new settings (e.g., validPageBadgeTimeout), expands detection rule documentation for code-driven logic, and updates branding and general settings guides for cross-browser compatibility.
Zacgoose
force-pushed
the
page-recheck-fixes
branch
from
1d3497d to
eb19ae8
Compare
Webhooks and CIPP reports are now sent only via explicit message handlers to avoid duplicate reporting. Updated logic for sending and defanging URLs in webhook payloads, improved logging, and enhanced code consistency and formatting throughout content.js and background.js.
…on-rules Add bypass techniques research, testing framework, and code-driven detection rules for phishing detection
Signed-off-by: Zacgoose <[email protected]>
Make secondary checks less heavy and some extra logging
…e phishing logs and indicators
Fix manual re-scan blocking and service worker wake-up
Reduce false positives and improve some rules
2 participants
Added functions to compute page source hash and check for significant changes. Implemented scheduling for threat-triggered re-scans with progressive delays.