🔒 Privacy & Permissions Optimization

Strict Domain Scoping (host_permissions): Replaced global wildcard permission (<all_urls>) with domain-specific origin match patterns (*://*.instagram.com/* and *://*.tiktok.com/*).

Eliminated Broad Firefox Warning: Firefox will no longer prompt users for "Access your data for all web sites", displaying only access requests for Instagram and TikTok.

API Permission Cleanup: Removed unnecessary "tabs" permission from manifest.json following strict least-privilege guidelines.


⚡ Background Script & Engine Enhancements

Targeted WebRequest Listeners: Restricted webRequest.onHeadersReceived and webRequest.onErrorOccurred listeners in background.js from <all_urls> strictly to Instagram and TikTok target URLs.


🛡 Mozilla AMO Compliance & Security

Data Collection Declaration: Included data_collection_permissions: { "required": ["none"] } in manifest.json under browser_specific_settings.gecko.

DOM Security: Removed unsafe .innerHTML usage in options.js and transitioned to standard DOM node creation with .textContent to comply with Mozilla linter security guidelines.