1.1.14

Changes

The Privacy pane has been merged into the Settings pane in the dashboard.

Privacy-wise flawed user agent switcher removed

User agent spoofing as been removed. This was planned since a long while. The bottom line is that user agent spoofing for privacy purpose is best left to a dedicated extension, and really your best choice privacy-wise is probably to rely on Firefox's recent fingerprinting-resistance feature.

<noscript> tags

A new global setting has been added in the dashboard: "Spoof <noscript> tags when 1st-party scripts are blocked". Disabled by default so as to not change uMatrix's current behavior. Once 1.1.14 is widespread, I will toggle that setting to enabled by default.

Since spoofing <noscript> is not necessarily always desirable, the global setting can be overridden on a per-scope basis with the "<noscript> tag spoofing" switch.

This feature is most useful to users who block 1st-party scripts by default.

Note that this might be the long term approach used for enabling <noscript> tags: the approach planned by Firefox is not really suitable to uMatrix, as this would require to completely disable javascript for a site (causing the matrix ruleset to be disregarded), while with the current approach, one can still enable 3rd-party scripts and yet have the <noscript> tags spoofed.

I have observed that the feature behave slightly differently on Firefox than on Chromium: Firefox will not react to <meta http-equiv="refresh"> tags, while Chromium does. I do believe this can be fixed, and I will experiment more with this.

Blocked root document

Ability to parse the URL of blocked document has been imported from uBO:

Unlike uBO however, the parsed URL information is expanded by default since uMatrix is meant for advanced users (you can collapse it by clicking on the magnifier).

Logger

Ability to open the logger in its own (popup) window, just as with uBO. If you want the logger to be in its own separate window, press Shift while clicking the logger icon will cause the logger to always be launched as a separate window. You do not need to press the Shift next time, it's only used to toggle between both attached/detached states.

Closed as fixed:

Firefox

• uMatrix doesn't keep "show only domains" in Private Window

Core

• Logger's embedded popup panel fails to resize properly
• Bypass redirects
• <noscript> is ignored when uMatrix blocks JavaScript
• navigator.platform is exposed despite Spoof User-Agent

1.1.12

New mini-guides

• The popup panel
• How to block 1st-party scripts everywhere by default
• How to create rules which apply everywhere, on all web sites
• How to work in hard 3rd-party default-deny by default
• How to work with only global rules and all scripts blocked by default
• How to get past "uMatrix has prevented the following page from loading"
• How to "allow-all" in uMatrix

Ongoing work

• Bad matrix scaling on Firefox mobile

Accepted pull requests:

• @penguinDad: Fix color-blind friendly mode (dev build regression)
• @shub-nougat: Scopes hover
• @xofe: Minor fixes
• @xofe: Remove some unused resources (holdovers from HTTPSB)
• @StoyanDimitrov: Remove unused l10n string
• @Neui: Use native textarea when editing user rules
• @Pulsera: Commented out unused code

1.1.10

Fixed a minor CSS regression causing the persist/erase buttons to not be properly updated while in the global scope (reported here #821 (comment)).

1.1.8

Changes

You can now set the default scope level in the Settings pane in the dashboard (as requested in #821). The popup panel will always use the selected default scope the first time it is opened (whereas before the last selected scope was used).

The scope selector in the popup panel has been revisited as per suggested solution in #821:

^{Just click the proper hostname label to select various scopes.}

It works very well compared to the previous way of selecting a scope (dropdown list). Other virtuous side effects:

• it puts the ability to work in global scope in full view -- this will probably help dispel the often heard erroneous conclusion that it is not possible to create global rules.
• it also enables the ability to set the scope to anything in between full hostname and top-level domain (as per Public Suffix List).

Firefox for Android

Tentative support for Firefox for Android. See #828. I was not planning to maintain a version for Android, but contrary to what I thought, it turns out this might be just a trivial task (thanks to webext).

Closed as fixed:

• Default Namespace

1.1.6

Changes

Important: A new default rule has been added following investigation of that issue. The rule will exist for new installations of uMatrix, but will not be imported for existing installations of uMatrix. In such case, I strongly suggest you add it manually in your My rules pane (don't forget to commit):

matrix-off: wyciwyg-scheme true

Edit: just found a very old issue which had been opened about this: #334.

Closed as fixed:

• frames still blocked after pressing umatrix reload button
  • Pressing Shift while clicking the reload button will now cause the browser cache to be bypassed, which is sometimes necessary after adding/removing rules.
• Make placeholders in iframes clickable
  • The placeholders were already clickable, the clickable item has just been made a bit larger.

1.1.4

Much translation work has been imported from https://crowdin.com/project/umatrix.

Closed as fixed:

• Cloud storage merge button broken
  • The pull-and-merge button does not visually render completely properly on Firefox (the plus sign is supposed to be top-right), I still need to investigate this.
• "Preferences" in about:addons should lead to the preferences

1.1.0

Changes

If you wish to migrate from 1.0.0 to uMatrix/webext but want to keep all your settings/data, just go through the intermediate step of installing uMatrix/webext-hybrid before installing uMatrix/webext. The most recent uMatrix/webext-hybrid is 1.0.1b4, available in dev channel on AMO.

See uBlock Origin's "Firefox WebExtensions" documentation, this also applies to uMatrix.

Fixes:

Firefox

• Popup/popunder blocking broken after opening uBO's dashboard through popup panel
  • Same issue in uMatrix could cause popup/popunder blocking to be broken in uBO.
• Sync is bogus with the new version of uBlock
  • If you still have sync issues even after the fix, see if gorhill/uBlock#3006 (comment) works for you.
• all 4chan threads will crash while umatrix 1.01b1 -- fixed with c74174a.
  • Nightly crashes if the content script merely tried to read window.indexedDB. Since that code was still unused, I just commented it out completely.
• Menu has too much space on the top and bottom

1.0.0

Changes:

Media resources are now reported in the image plugin column (to be renamed media), having these reported in the other column does not make much sense. Typically, users of uMatrix would have the click-to-play setting for plug-ins enabled in their browser -- this has always been the recommended settings. Hence this means that if one allow media, this won't necessarily allow plugins, these will still be click-to-play. Plugins are slowly disappearing, and having a column strictly dedicated to plugins is wasteful, thus I decided to merge media and plugins.

Websocket connection attempts are reported in the xhr column.

There is now a badge on the per-site switches icon, which badge displays the number of switches which are currently turned on. This should help remind user to also check for these switches when trying to un-break a web page.

The assets management code has been refactored by importing code from uBlock Origin. Given the amount of work required and given the not-enough-time issue, all the hosts files you may have un-selected will be selected again. You will have to un-selected them again. Sorry, I just do not have the time for backward compatibility.

There is now a hybrid webextension version for uMatrix, see uMatrix.webext.zip below. The migration process is exactly the same as with uBlock Origin, see https://github.com/gorhill/uBlock/releases.

Closed as fixed:

Chromium

• Add Support for WebSocket Connections for Chromium
• UI glitch
  • Possibly a browser bug as the issue didn't exist until recent Chromium versions (57+). However I do not have time to investigate, the fix is to work around the weird issue observed in Chromium.

Firefox

• uBO broken on Firefox mozilla-central tip (fixed by @gijsk through pull request #2493)
• Incompatibility between ABP and uBO over FETCH (json)
• IPv6 password form submission fails

SeaMonkey

• Error when dealing with DOMParser.parseFromString()
• Toolbar icon gone in private browsing window

Core

• Images loaded via <img srcset="..."> are shown in 'other' column
• IPv6 rules are not saved across restarts and not properly applied
• Why not grey out three dots for better clarity?
  • The chosen solution is to display the number of currently turned on switches as a badge on the icon.

0.9.3.6

Closed as fixed:

Firefox

• Allow JSON files as import from Noscript
• NoScript + uMatrix = cookie leak
• TabContext.onGC has bad scalability on FF
• Default placeholder background takes too long to display (FF ESR 38, Linux)

SeaMonkey

• Custom rules reset after each browser restart

Core

• CSP rule breaks site unless 1st party scripts are allowed
• No number in icon

0.9.3.4

Changes:

Added zh_TW translation into the package. The Chinese Traditional translation had been available since a while, but I forgot to modify the script used to import translation from Crowdin.