From a76da4f783ceb112293ac82c209846437b96e55f Mon Sep 17 00:00:00 2001 From: CyberMind-FR Date: Sat, 27 Jun 2026 08:43:21 +0200 Subject: [PATCH] =?UTF-8?q?release:=20toolbox-ng=200.1.24=20+=20toolbox=20?= =?UTF-8?q?2.7.22=20=E2=80=94=20SW-neuter=20#753?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- packages/secubox-toolbox-ng/debian/changelog | 14 ++++++++++++++ packages/secubox-toolbox/debian/changelog | 8 ++++++++ 2 files changed, 22 insertions(+) diff --git a/packages/secubox-toolbox-ng/debian/changelog b/packages/secubox-toolbox-ng/debian/changelog index 4b2883a8..8764ffc4 100644 --- a/packages/secubox-toolbox-ng/debian/changelog +++ b/packages/secubox-toolbox-ng/debian/changelog @@ -1,3 +1,17 @@ +secubox-toolbox-ng (0.1.24-1~bookworm1) bookworm; urgency=medium + + * #753 targeted Service-Worker neuter: PWA news sites (leparisien, cnn, + 20minutes, franceinfo) serve their main HTML from a Service-Worker cache, so + the navigation never reaches the MITM and the transparency banner can't be + injected. For an operator-curated allow-list (--sw-neuter-hosts, default + /var/lib/secubox/toolbox/sw-neuter-hosts.txt) sbxmitm answers the SW script + fetch with a passive self-unregistering SW so the next navigation reaches the + MITM (→ banner). Auto-learn: non-listed SW hosts are flushed to the portal's + /__toolbox/sw-candidate for operator review. Targeted-strict: empty list = + no-op (ships inert until the operator adds a host). + + -- Gerald KERMA Sat, 27 Jun 2026 08:45:00 +0000 + secubox-toolbox-ng (0.1.23-1~bookworm1) bookworm; urgency=medium * #751 rebuild from master: the deployed 0.1.22 binary was STALE and lacked diff --git a/packages/secubox-toolbox/debian/changelog b/packages/secubox-toolbox/debian/changelog index 312178ee..f7700cee 100644 --- a/packages/secubox-toolbox/debian/changelog +++ b/packages/secubox-toolbox/debian/changelog @@ -1,3 +1,11 @@ +secubox-toolbox (2.7.22-1~bookworm1) bookworm; urgency=medium + + * #753 portal ingest for the SW-neuter auto-learn: POST /__toolbox/sw-candidate + dedup-appends SW-PWA hosts (proposed by sbxmitm) to + /var/lib/secubox/toolbox/sw-neuter-candidates.txt for operator review. + + -- Gerald KERMA Sat, 27 Jun 2026 08:45:00 +0000 + secubox-toolbox (2.7.21-1~bookworm1) bookworm; urgency=medium * #754 reconcile bundle.py to the working #740 DOM-API banner (mk() builder,