What's new in 0.1.3

Improvements

• The popup now auto-selects a domain on first use, so you can generate
  aliases immediately without extra steps.
• The domain hint no longer flashes a red error when the popup opens —
  guidance appears only when needed.
• The "Choose" tab no longer shows "(0)" while loading. The count
  appears only after your aliases are fetched.
• The overlay label on email fields now correctly reads
  "Email Alias Manager" to match the extension name everywhere.
• The overlay status after loading aliases now reads "191 aliases"
  instead of the generic "191 loaded."

Security & reliability

• Alias generation now uses cryptographically secure randomness
  (crypto.getRandomValues) instead of Math.random.
• All API requests now have a 30-second timeout to prevent the
  extension from freezing if the server is slow or unreachable.
• The clipboard fallback no longer injects user data into executable
  code strings. It uses message passing instead.
• The dictionary word list is no longer exposed to websites
  (removed from web_accessible_resources).
• Password minimum length is now consistently 8 characters across
  all lock/unlock flows.

Fixes

• Fixed API endpoint: /domains → /api/domains to match the
  current server API.

Version 0.1.2

What’s new:
- New onboarding flow in popup:
- Connect with an existing API key, or request a new key by email.
- API key is validated before being saved.
- Popup UI/UX improvements:
- Clear Generate / Choose tabs.
- Searchable domain combobox with favorites (star/pin).
- Better keyboard accessibility (tabs, combobox, actions).
- Alias generation improvements:
- Domain must be explicitly selected when required.
- Optional alias style (readable words or random).
- Optional custom alias name with live preview and validation.
- Choose tab improvements:
- Better search/list handling and alias count display.
- Copy and delete actions improved.
- Delete confirmation modal.
- New Input Overlay controls in Settings:
- Enable/disable overlay globally.
- Show on all sites, only selected sites, or hide on selected sites.
- Manage site rules list in settings.
- “Disable on this site” action directly in the in-page overlay.
- Site rule handling hardened:
- Better normalization/migration for stored site entries.
- Proper handling for host rules, file:// pages, and special schemes.
- API integration updates:
- Paginated alias list fetching.
- JSON request bodies for alias create/delete.
- Security hardening:
- Replaced dynamic HTML injection with safe DOM creation (createElement/textContent).

Email Alias Manager (Free)

Description

Manage email aliases for Haltman.io Mail Forwarding directly in the browser. Create, list, and delete aliases using your API key, with quick in‑page actions on email fields and a right‑click context menu to generate a random alias and copy it to the clipboard.

Features

• Manage aliases via the Haltman.io Mail Forwarding API (list, create, delete).
• In‑page UI next to email inputs for fast alias insertion:
• Generate: creates a random alias (word1.word2) and inserts it into the input.
• Choose: loads your existing aliases and inserts the selected alias into the input.
• Context menu item (“Generate random alias”) to create an alias and copy it to the clipboard with a notification.
• Works only with a valid API key (onboarding shown otherwise).
• Communicates only with https://mail.haltman.io (alias operations).
• Does not read existing email field values before writing.
• Does not send the current website URL or page content to the backend.
• Optional local lock: API key stored encrypted (PBKDF2 + AES‑GCM); password is never stored.

Change Log (this version)

• Fixed AMO linter warnings about unsafe innerHTML in the content script.
• Replaced dynamic innerHTML with safe DOM creation (createElement + textContent) in:
• Alias list rendering.
• Icon button image creation.
• No functional changes expected; this is a security/DOM-safety improvement.