Beta Notes
==========

This beta will use its own subdirectory, so you can run both, this and the
release version in parallel.  Under the hood it is rather different to the
previous release, especially CSS and JS wise.  It works, but some things are
still a bit messy, and bugs are likely.

Quite a few filter hits are logged to Log-Rare (prevention of too common
exploits is not logged right now), so you may need to clean up this file now
and then.  However, leave the very first line as is!  Or - if you'd like to
help with squashing bugs - email me the full log files instead, or PM or post
them on one of the boards (minus any links that you prefer to keep private).

There are five config modes now, as described in Config_Control.txt.  Those who
like to run the undamped config - which was the default in previous versions -
will want to activate "Advanced Mode" and deactivate "Never alter Page/Link
Styles".


2006-01-09
==========

Main changes:

Session-only cookie filters now cover "max-age" cookies as well.

New list "Content-Types.ptxt" that acts upon the incoming content-type and
fixes common notation errors.

Some efforts to deal with dynamically loaded scripts (aka XMLHttpRequest
aka AJAX) that come with an incorrect/bogus content-type.

Add "pl", "wmf", "xml" to "Sniff content" list.

Prevent pages from accessing our own stylesheets (wonky test).

All ad lists updated and verified.


2005-11-27
==========

Numerous changes, including:

Nested open tags aren't counted anymore.  Instead, they are closed with a JS
function (which checks the DOM tree) at the end of page.

Cookies with expiration dates in the past (IOW, cookie removals) aren't altered
by the session-only filters.  Wonky test, but fixes re-login at GMail and
shopping cart at Overstock.

Fixes for IE's "can't execute code from a freed script" error on pages with
complex charcodes (tested on Korean sites).

Upgrade to JS Shell 1.4 (works in IE again!).

Started to merge the new hosts in pgl's adserver list.


2005-10-19
==========

Things to watch for new bugs:

Proxomitron's URL commands get removed from the JS location properties.
Example:  You've loaded "http://mypage.com/" with the "px.bout.." command.
The location's "hostname" property would reveal "px.bout..mypage.com" (which
bugged me for years :-).  "px.bout.." is what gets stripped now.
This also fixes the Half-SSL loops at http://register.go.com/movies/lists and
http://www.nutzwerk.de/safersurf/ .

I've added a few more ad filters, rewrote the ad container filters, and more
webfilters are enabled for external scripts now.

Entries in AdPaths.ptxt that didn't hit anymore were removed.  May need to add
back a few.

"Randomizers: Return Constant", a nice but potentially troublesome filter.
Only active in advanced mode.

Different/modified interception of timers/popups.  Former may need to get
restricted to advanced mode as well.


To do:

More testing in IE/Opera.
More testing of new light/minimal modes.
Re-sync AdHosts and AdDomains with pgl's list.


Other notes:

One feature i've been experimenting with but didn't prove too useful, will
probably vanish next time.  So if anyone wants to play with it:  If you
activate "Content-Type: 7b Filter JPEGs", then JPEGs that are in truth GIFs get
killed, thus preventing that images slip thru Proxomitron's "Freeze GIF
animation" option.  Hits (incl. quite a few harmless GIFs) get logged to
Log-Rare.

Most filters aren't fully downwards compatible, so please don't mix them with
the release config.


Good luck!
sidki