MindTab Zip AOM

Recent Changes:

[1.2.0] — 2026-05-16

Added

• Spaced repetition (SM-2); Flashcards now use a lightweight SM-2 algorithm. "Got it" increases a card's interval; "Skip" or timeout resets it. Due cards are shown first, and a badge on the overlay shows how many cards are currently due
• Flashcard export / import; Custom cards can now be exported as JSON and imported back (or shared as a deck). Import merges into existing cards, with schema validation
• Writing check controls; Settings page now lets you toggle each Tone Translator check independently (passive voice, hedge words, long sentences, filler words, repeated words) and configure the long-sentence word threshold (15–50 words)
• Manual theme override; Settings page has a System / Light / Dark segmented control that overrides prefers-color-scheme; preference persisted in sync storage
• Custom filter list sources; Settings page exposes the three filter list URLs with add/remove UI; previously only configurable programmatically. Changes take effect on next update
• Various GitHub Only Changes/Additions not Included in this zip.

Changed

• Keyboard shortcuts: Esc closes the Tone Translator panel; Alt+Shift+F triggers a flashcard on demand
• ARIA improvements; Tone panel has role="complementary" + aria-label; flashcard overlay has role="dialog" + aria-modal="true"; flashcard buttons receive focus on card show
• Grammar server cooldown; Added a 750 ms post-analysis cooldown to prevent hammering the grammar server during rapid typing (on top of the existing debounce)
• Filter list integrity check; If a fetched update drops the total selector count by more than 30% vs. the cached set, the update is rejected and the cache is preserved
• Branding; Credit updated to AetherAssembly across all UI pages, linking to https://aetherassembly.org/about
• Bump version to 1.2.0
• Various GitHub Only Changes/Additions not Included in this zip.

View the Full ChangeLog here

MD5: 4dc843422b7039054b8a7577260bf236

SHA256: f8f8951a7b9bd03b050e80014771ba336498af1f5f51e51d4fe28255111579f2

SHA512: 4dd02acaf6ca0366019eaf81828406326ec310f897d9758a6aa15aa3681c285ca6a0aa0cd06a56f73666ab480cbe1dbe31781c83040df0a3e01d18c6609b1199

[1.1.2] — 2026-05-12

Added

• Dedicated Settings page — settings moved out of the popup collapsible into a full-page ui/settings.html, opened in a new tab via a Settings button in the popup
• Test Connection button — verifies the grammar server URL by pinging /health, showing latency and upstream URL on success or a descriptive error on failure
• Tone Translator server status dot — small indicator in the writing assistant panel header shows connection state: green (connected), orange (unavailable), gray (not configured)
• Tone Translator offline/error states — grammar section now shows contextual messages instead of silently hiding: "Local analysis only" when no server is configured, "Checking grammar…" while a request is in-flight, "✓ No grammar issues found" on a clean result, and "Server unavailable" with a Retry button on failure

Fixed

• Incomplete URL sanitization — feedSanitizer.js used host.includes('youtube.com') which matched spoofed domains like fake-youtube.com; replaced with exact match + .endsWith() checks (resolves CodeQL alerts #3–6)
• Permissive CORS — grammar proxy server defaulted to Access-Control-Allow-Origin: *, allowing any website to use the proxy; origin is now unconditionally validated against moz-extension://, chrome-extension://, and localhost — the CORS_ORIGIN env var bypass has been removed (resolves CodeQL alert #7)