ClarityFilter v4.0 - Major Security & Stability Update 🚀 What's New in v4.0 This major update brings significant security improvements, bug fixes, and enhanced stability across both Chrome and Mozilla versions of ClarityFilter. 🔒 Security Enhancements 1. Enhanced PIN Protection

Upgraded to PBKDF2: Replaced simple SHA-256 with PBKDF2 (150,000 iterations) for much stronger PIN hashing
Salt Consistency: Standardized salt separator format across all components

2. Input Validation & Sanitization

Import Security: Added comprehensive validation for JSON imports with file size limits (1MB) and rate limiting (5-second cooldown)
ReDoS Protection: Added regex complexity limits to prevent ReDoS attacks
Content Sanitization: Enhanced input validation with length limits and HTML sanitization
Synthetic Event Protection: Added e.isTrusted checks to prevent malicious keyboard event injection

3. Content Security Policy (CSP)

Tightened CSP: Removed unsafe-inline and moved inline styles to CSS classes
XSS Prevention: Enhanced protection against cross-site scripting attacks

🐛 Bug Fixes 1. Keyboard Shortcut Issues

Chrome Manifest V3 Fix: Resolved service worker lifecycle issues that prevented keyboard shortcuts from working
Race Condition Fix: Eliminated stale-read issues between background and content scripts
Atomic Toggle: Implemented atomic toggle operations to prevent double-flipping

2. PIN Management

PIN Removal Bug: Fixed issue where users couldn't remove PINs after setting them
PIN Verification: Resolved inconsistencies in PIN verification across different components
Storage Consistency: Fixed missing PIN algorithm and iteration fields in storage

3. Import/Export

Format Flexibility: Enhanced JSON import to handle additional fields (mode, pixelCell) gracefully
URL Validation: Improved URL validation to accept domain-only entries (e.g., "reddit.com")
Error Handling: Better error messages and validation feedback

⚡ Performance Improvements 1. Service Worker Optimization

Keep-Alive Strategy: Implemented aggressive service worker keep-alive for Chrome Manifest V3
Reduced Quota Errors: Added rate limiting to prevent MAX_WRITE_OPERATIONS_PER_MINUTE errors
Memory Management: Improved memory usage and cleanup

2. Content Script Efficiency

Reduced Redundancy: Eliminated duplicate keyboard handlers and message processing
Optimized Scanning: Improved DOM scanning performance with better node limits

🎨 User Experience Improvements 1. Enhanced Status Messages

Visual Feedback: Added color-coded status messages (green for success, red for errors, blue for info)
Better Design: Improved styling with borders, shadows, and smooth transitions