Restored network switching UI (browser_action + options_ui)

We've dramatically improved the Content Security Policy to prevent XSS and injection attacks:
Comprehensive security analysis.
- ✅ Removed 'unsafe-eval' - Prevents eval() and new Function() attacks
- ✅ Removed 'unsafe-inline' from script-src - Blocks inline script injection
- ✅ Added default-src 'none' - Defense in depth, deny by default
- ✅ Whitelisted IPFS gateways - Only trusted sources allowed
- ✅ Added frame-src directive - Controls iframe sources
- ✅ Added base-uri 'self' - Prevents base tag hijacking
- ✅ Added form-action 'none' - Blocks form submissions

🦊 CSTP Firefox Extension v1.1.2 - Release Notes

Release Date: December 3, 2025
Version: 1.1.2
Status: Stable - Recommended Update
Package: cstp-firefox-1.1.2.zip (116 KB)



🎯 What's New

Critical Fix: Global V3 Program ID Migration

This release fixes a critical issue where the marketplace and other tabs would continue using the old V2 program ID even after migration, causing "Domain not found" errors.



🔧 Bug Fixes

Fixed: Multi-Tab Program ID Synchronization

Problem:
- v1.1.1 only migrated program ID when loading CSTP domains
- Marketplace tabs and other contexts still used cached V2 program ID
- Users saw inconsistent behavior across tabs

Solution:
- Added global migration in background.js
- Migration now runs on extension startup
- All tabs immediately use correct V3 program ID
- No more tab-specific migration issues

Impact:
- ✅ Marketplace correctly displays user domains
- ✅ Domain resolution works consistently
- ✅ No manual storage clearing needed
- ✅ All tabs synchronized automatically

New Features:
- Network switching between Mainnet and Devnet
- Settings page for easy network selection
- Currently operates on Solana Devnet (mainnet support coming soon)
- Clear messaging when mainnet is selected but not yet deployed

What's Included:
- Support for 8 decentralized TLDs (.zero, .test, .sol, .inu, .x, .developer, .free, .social)
- Direct Solana blockchain resolution
- Native IPFS protocol support
- Privacy-focused design (no data collection)
- Informational banner showing domain and resolved address
- Browser tab title displays domain name

Technical Details:
- Defaults to Devnet (currently deployed network)
- Users can access settings via Firefox Add-ons → CSTP → Preferences
- Network preference saved locally
- No external servers or tracking

This version is designed for testing and development on Solana Devnet. Mainnet support will be added in a future update.