SECURITY AND PRIVACY (LOCATION MASKING)

• Privacy fix: a page could read your real location while masking was on. Two tricks got past the mask in 1.0.7: making instanceof Geolocation lie, and calling the location API through a same-origin frame's object. Both now get the masked location. Found in review; no report of use.
• Privacy fix: a page could tell Sessyn was installed, by sending the message the popup uses to check that masking is running. The two location scripts now talk over a channel pages cannot read or write.
• Privacy fix (Safari): any page could read the masked location without asking for permission. The Safari shortcut that skipped the permission check is removed.
• Safari: the fallback that added Sessyn's script to the page as an element is removed. It exposed the extension's address to the page and could not be trusted to mask. If Safari does not run the script itself, the popup now reports that masking is not working there.
• A page can no longer change the masked time zone, or turn a refused permission prompt into a masked answer by rewriting the error.
• Tabs that were open before you turned masking on are no longer patched in place. That could not protect them reliably. The popup asks you to reload the tab instead.
• Frames with no permission are told nothing. Inside a frame, Sessyn now waits for the browser itself to deliver a location before masking it.

CHANGED

• In Firefox, about:blank, srcdoc and blob: frames now get "position unavailable" instead of the masked location. They never get the real one.
• A new time zone applies when the page is reloaded.
• The verify page shows "active" only after the extension has answered, and reports site access as the browser states it.
• Every Sessyn page refuses to load inside another site's frame.

FIXED

• Dates such as 2026-1-15 were read as having a UTC offset when the time zone was masked.

INTERNAL

• No personal name in the build tools or test fixtures: the Safari signing check now looks at the certificate's shape, and extra words come from the builder's environment (SESSYN_ANONYMITY_DENY).
• A test fails the build before any shipped file nears the stores' 5 MB limit.
• Safari's wider permissions are written down in docs/extension/PERMISSIONS.md.

SUMMARY

• 60 FPS GPU <canvas> + Path2D offline cartographic map and city-first default. Replaced DOM-heavy SVG map paths with a high-DPI (<= 2.5×) <canvas> + once-compiled native Path2D engine backed by a 36×18 (10°×10°) spatial tile grid (901 KB peak cell, dissolved land fills, and dedicated exterior coastline polylines), eliminating wheel/trackpad/pinch zoom lag and opening already-picked locations directly at city level on Frame 1 instead of the whole globe.
• Non-blocking popup startup, Protection & Setup Checklist resolution, and Open the Larger Map. Decoupled open-tab geolocation script injection (injectOpenTabs) off the background locationQueue with bounded per-tab timeouts, skipped sleeping or discarded tabs, added a bounded fast-path for getState plus resilient Retry Status Check recovery so the More tab checklist never hangs on Checking…, wired Open the Larger Map and navigation links synchronously before background wakeup, and carried typed custom coordinates straight into the full-page map across Chrome, Edge, Firefox Desktop & Android, and Safari macOS & iOS/iPadOS.
• Privacy & security: 100% offline map and search (ADR-0017 — zero external tile, font, or geocoding requests); PC-8 silence toward unpermitted origins and cross-origin iframes is unchanged; no new manifest permissions.

SUMMARY

• Reliable Chrome location dropdown and MV3 service-worker cold-start recovery. Populated all 38 global city presets and Choose on the map… synchronously on popup and Settings startup before waiting for the MV3 service worker, added automatic sendMessage cold-wakeup retries across the popup, Settings, and full-page picker, and ensured the location panel always renders even when a cold service worker takes longer to wake.
• Instant auto-save on pick with unmistakable ✓ Saved confirmation. Picking a preset, clicking a city or airport search result, clicking/tapping any spot on the map, or submitting coordinates now saves immediately across both the toolbar popup and full-page map, displaying a prominent ✓ Saved confirmation badge on the map alongside ✓ Saved & Active status readouts (or honest Staged wording if browser permission is declined).
• Smooth proportional zooming, zoom slider, scale bar HUD, and neighborhood depth. Replaced fixed-step wheel jumps with smooth exponential trackpad/mouse-wheel/pinch zooming, added an interactive logarithmic zoom slider, Center on Pin, a live metric/imperial scale bar (km/m + mi/ft) with zoom multiplier and cursor coordinates, smart zoom-in toward the active pin from world view, and deeper neighborhood zoom (0.04° span).
• Expanded 100% offline Natural Earth v5.1.2 cartographic map. Upgraded the bundled on-device map to a 7-theme cartographic palette with latitude/longitude graticule lines, coastal shorelines, national parks, urban footprints, lakes and rivers, major highways vs. local roads (56,600 segments), railroads (25,413 segments), country/state/county boundaries, country and state/province watermarks, 135,233 cities/towns/suburbs/villages with US/CA/AU state/province disambiguation, 893 airports (searchable by 3-letter IATA code), and 1,081 seaports across 144 spatial grid cells.
• Privacy & security: 100% offline map and search (ADR-0017 — zero external tile, font, or geocoding requests); PC-8 silence toward unpermitted origins and cross-origin iframes is unchanged; no new manifest permissions.

SUMMARY

• Firefox for Android location masking on real websites and indoors. Fixed document_start capability handshake rejection when head script tags are already parsed before location-page.js finishes compiling on mobile, relaxed indoor GNSS enableHighAccuracy options for the discarded native permission call on Firefox for Android while keeping 8–25 m masked accuracy, hardened open-tab script injection, and opened the full-page map in a browser tab so mobile permission prompts anchor reliably.
• Sticky top and bottom ← Back to Settings controls on the full-page map. Made the Choose a Location header sticky, added a dedicated ← Back to Settings button inside the sticky bottom bar alongside Use This Location, Save & Back to Settings, and Reset — Use My Real Location, and added a Settings button to the popup header so Settings is always one tap away.
• Privacy & security: PC-8 silence toward unpermitted origins, cross-origin iframes, and forged window.postMessage / CustomEvent probes is unchanged; no new manifest permissions or network requests.

SUMMARY

• Direct feature settings and location picker shortcuts from the Safari app. Added Configure Protections & Location in Safari, Choose Masked Location on Map, and per-module Safari jump buttons inside the iOS, iPadOS, and macOS companion app, plus a Choose Masked Location… shortcut in the extension popup footer and on https://sessyn.io/verify/.
• Privacy & security: allowlisted internal target keys (settings, location, console) only, with immediate history.replaceState URL scrubbing and no new manifest permissions or network requests.

SUMMARY

• Mobile location picker and Settings round-trip navigation. Added an inline quick-pick city selector inside Setup and Settings, in-place navigation into Choose a Location on mobile and Add-on Settings sheets (?from=settings / ?from=popup) instead of stranding orphaned background tabs, a top ← Back to Settings header button, and a sticky mobile bottom action card with Use This Location, Save & Back to Settings, and Reset — Use My Real Location always visible without scrolling.
• Clearer staged vs. active readouts and touch map gestures. Added explicit Selected: … — tap “Use This Location” to apply vs. ✓ Active: … states across both the full-page map and toolbar popup, inline Match My Time Zone to This Place on the full-page picker, two-finger pinch-to-zoom and jump-free touch panning on both maps, and a Setup & Settings header link on the cookie console.
• Privacy & security: no background network requests and no manifest permission changes; the city catalog and map remain 100% on-device.

SUMMARY

• Live Protection & Setup Checklist and sessyn.io/verify handshake. Added a live 4-item green checklist to both the toolbar popup (More) and Setup and Settings confirming signed tracker rules, cross-site access, on-page protection permissions, and a live browser handshake on https://sessyn.io/verify/ (with a permanent 301 redirect from sessyn.com/verify/ and a direct Open Sessyn Extension Settings button).
• Firefox for Android location and time zone masking. Fixed on-page scripting permission prompts within synchronous user gestures on Firefox for Android (gecko_android 142+), dynamic content-script registration recovery on background wakeups, and temporary geolocation grant handling so selected cities and matching time zones apply reliably on mobile pages.
• Safari companion app (iOS, iPadOS & iPhone Duo) and direct settings shortcuts. Redesigned the iOS/iPadOS companion app with direct SFSafariSettings extension deep links, automatic extension-state checks, a persistent 3-item setup checklist, foldable inner-screen and 4-way orientation support, and safe-area layout across phone and tablet viewports.
• Privacy & security: no new background network requests and no install-time manifest permission changes; narrow https://sessyn.io/* scripting access is requested only when you click Verify on sessyn.io.

SUMMARY

• Safari popup, dark theme, website-access flow, and location spoofing. Fixed the Safari toolbar popover width (460px), defaulted safari-web-extension: pages to dark theme when appearance is set to Match My System, packaged required extension permissions and web_accessible_resources in the Universal Safari .appex bundle, and added direct browser.scripting.executeScript({ world: 'MAIN' }) location and time zone spoofing on Safari.
• Mobile phone & tablet support (iOS / iPadOS Safari & Firefox for Android). Added responsive mobile viewport layout (in-mobile) for iPhone and Android screens, declared gecko_android compatibility (strict_min_version: 142.0) for Firefox for Android, and added signed iOS/iPadOS .ipa packaging alongside the notarized macOS .dmg installer.
• Privacy & security: no new network requests.

SUMMARY

• High-detail offline maps in both the popup and full-page location pickers. Zooming in on either map now loads Natural Earth 1:10 million urban areas, major highways and local roads, railways, minor islands, US county boundaries, North American and European regional lakes and rivers, and 893 airports with IATA codes, alongside 49,000+ cities and towns (population >= 5,000) plus 63,000+ smaller towns and suburbs (population >= 1,000) bucketed per regional grid cell. The popup map now supports zoom (+/−/Reset), mouse-wheel zoom, drag-to-pan, and keyboard arrow navigation, and the full-page map zooms 5× deeper (0.08°). Every map layer and city label remains 100% offline inside the extension (ADR-0017).
• 32 major global & US cities in the quick-pick preset menu. Added a Quick Pick a Major City dropdown to both the popup and the full-page location picker with 32 major cities across North & South America, Europe, Africa, the Middle East, Asia, and Oceania.
• Privacy & security: no new network requests and no permission changes.

SUMMARY

• Location and time zone masking in real Chrome and Firefox without OS fixes. When macOS or desktop location services hang without returning a fix, time out (TIMEOUT), return empty-message POSITION_UNAVAILABLE errors, or deny OS-level location in Firefox (PERMISSION_DENIED), granted sites now receive your chosen location within 150 ms with each engine's native toJSON key order.
• Already-open tabs and background wakeups. Turning on location or time zone masking now injects the masking scripts into tabs that are already open, saves your chosen city before opening the Firefox permission prompt so popup closure cannot drop your selection, and reconciles script state whenever the MV3 background worker wakes up.
• Privacy & security: no new network requests and no permission changes.

SUMMARY

• Location masking works when OS location services are off or unavailable. When a site already has browser permission for your location, a desktop whose Wi-Fi location fails or whose OS location toggle is off now receives your chosen place instead of an error, and switching cities updates active page watches right away. Masked positions inherit from the browser's own GeolocationPosition and GeolocationCoordinates prototypes.
• Time zone masking handles daylight-saving transitions and parsed date strings. Spring-forward gaps, fall-back folds in both hemispheres, extreme dates, and timezone-less Date.parse strings now resolve in the chosen place's zone without leaking your device's DST state, and changing the zone updates open pages live.
• Three more cookie-banner systems declined automatically. When automatic banner declining is on, Sessyn now declines unanswered banners built on iubenda, Klaro! and CookieConsent v3 through their documented APIs, alongside OneTrust, Cookiebot, Didomi, Quantcast Choice, Usercentrics, Osano and Complianz.
• Rules: the bundled ruleset is 2026.10.23-2 (78 rules, up from 77), with 4 new verified identity-resolution proposals researched for LiveIntent, Yahoo ConnectID and Lotame Panorama ID.
• Privacy & security: no new requests and no permission changes. Dev tooling updated (web-ext 10.8.0 / node-forge 1.4.2).