Skip to main content

Changelog

All notable changes to Hushbug are documented here.

v0.1.0 -- Initial Release

Detection Engine

  • 10 detectors across 6 categories (Console, Network, Performance, Accessibility, Visual, Security)
  • Two-layer dedup: 5-second local window + global SHA-256 fingerprinting
  • Token bucket rate limiting (10 issues/sec with severity priority)
  • Performance budgets enforced per detector (4ms total worst case)

Content Script Architecture

  • MAIN world script for runtime API patching (console, fetch, XHR)
  • ISOLATED world relay with nonce-authenticated postMessage bridge
  • SPA navigation detection via pushState/replaceState patching

Side Panel UI

  • 4-tab layout: Issues, Config, Baselines, Export
  • Keyboard-accessible issue cards with severity indicators
  • Real-time updates via chrome.storage.onChanged
  • Dark mode support via prefers-color-scheme

Suppression System

  • Pattern matching: contains, exact, regex modes
  • Scope filtering: page, domain, global
  • Default exclusion list for common false positives
  • ReDoS protection for regex patterns

Tier Gating

  • Free: ConsoleError + NetworkFailure
  • Pro ($7/month): All 10 detectors, suppression, baselines, thresholds
  • One-time license validation via Stripe

Testing

  • 344 tests (260 unit + 84 integration), all passing
  • In-memory Chrome API mock with functional storage