Version 0.1.2

What’s new:
- New onboarding flow in popup:
- Connect with an existing API key, or request a new key by email.
- API key is validated before being saved.
- Popup UI/UX improvements:
- Clear Generate / Choose tabs.
- Searchable domain combobox with favorites (star/pin).
- Better keyboard accessibility (tabs, combobox, actions).
- Alias generation improvements:
- Domain must be explicitly selected when required.
- Optional alias style (readable words or random).
- Optional custom alias name with live preview and validation.
- Choose tab improvements:
- Better search/list handling and alias count display.
- Copy and delete actions improved.
- Delete confirmation modal.
- New Input Overlay controls in Settings:
- Enable/disable overlay globally.
- Show on all sites, only selected sites, or hide on selected sites.
- Manage site rules list in settings.
- “Disable on this site” action directly in the in-page overlay.
- Site rule handling hardened:
- Better normalization/migration for stored site entries.
- Proper handling for host rules, file:// pages, and special schemes.
- API integration updates:
- Paginated alias list fetching.
- JSON request bodies for alias create/delete.
- Security hardening:
- Replaced dynamic HTML injection with safe DOM creation (createElement/textContent).

Email Alias Manager (Free)

Description

Manage email aliases for Haltman.io Mail Forwarding directly in the browser. Create, list, and delete aliases using your API key, with quick in‑page actions on email fields and a right‑click context menu to generate a random alias and copy it to the clipboard.

Features

• Manage aliases via the Haltman.io Mail Forwarding API (list, create, delete).
• In‑page UI next to email inputs for fast alias insertion:
• Generate: creates a random alias (word1.word2) and inserts it into the input.
• Choose: loads your existing aliases and inserts the selected alias into the input.
• Context menu item (“Generate random alias”) to create an alias and copy it to the clipboard with a notification.
• Works only with a valid API key (onboarding shown otherwise).
• Communicates only with https://mail.haltman.io (alias operations).
• Does not read existing email field values before writing.
• Does not send the current website URL or page content to the backend.
• Optional local lock: API key stored encrypted (PBKDF2 + AES‑GCM); password is never stored.

Change Log (this version)

• Fixed AMO linter warnings about unsafe innerHTML in the content script.
• Replaced dynamic innerHTML with safe DOM creation (createElement + textContent) in:
• Alias list rendering.
• Icon button image creation.
• No functional changes expected; this is a security/DOM-safety improvement.