Haketilo

allow eval() in injected scripts

support schema v2 and dependencies on mappings

add more tests for CORS bypassing feature

allow injected scripts to bypass CORS using provided API

delay loading of js code in test_policy_enforcing.py

We don't want JS loading to happen upon python module load. We want to do it lazily. Here it was being done eagerly due to some previous overlooking.

prepare for exposing APIs to injected scripts

serialize and deserialize entire Response object when relaying fetch() calls to other contexts using sendMessage

don't double-modify response headers retrieved from cache

improvement to also properly sanitize intrinsics in XML documents under older browsers (IceCat 60)

present appropriate error message when using popup in Private Browsing mode

correct the Private Browsing mode notice on settings page

improve script blocking in non-HTML documents (XML)

fix setting of 'blocked-blocked<...>-' attributes and add tests

display an informative message in settings page if IndexedDB cannot be accessed

include $schema property in internally-generated resources/mappings

optimize Pattern Query Tree for size of its JSON.stringify()'ed representation

validate repository responses against JSON schemas

• compute_scripts.awk (include_file): don't enforce specific path format on #INCLUDE'd files
• .gitmodules, schemas: add Haketilo JSON schemas subrepo
• html/install.js (InstallView): import schema validator and run it against downloaded mapping and resource definitions...

make "uuid" an optional property

fix out-of-source builds