Log in
Add-on icon

All-Chat Extension version history - 10 versions

All-Chat Extension by Caesar

0 Stars out of 5
5
0
4
0
3
0
2
0
1
0
All-Chat Extension version history - 10 versions

  • Be careful with old versions! These versions are displayed for testing and reference purposes.You should always use the latest version of an add-on.

  • Latest version

    Version 1.5.7

    Released Apr 11, 2026 - 661.14 KB
    Works with firefox 115.0 and later
    All-Chat Browser Extension 1.5.7

    Changelog

    Firefox Compatibility
    • Fix streamer resolution ("not using All-Chat") — removed unnecessary Content-Type header from GET request that triggered CORS preflight in Firefox
    • Remove default-src 'self' from CSP — acted as restrictive fallback for unspecified directives in Firefox, blocking API calls and WebSocket connections
    • Guard empty platforms array in streamer lookup to show proper badge instead of broken UI

    Gradient Name Color
    • Fix gradient rendering: use inline -webkit-text-fill-color: transparent instead of Tailwind class (more reliable cross-browser)
    • Add validation to prevent invisible text from malformed gradient data
    • Show gradient preview swatch in popup settings when a gradient is active
    • Fetch cosmetics from backend when popup opens (picks up gradients set via allch.at)

    Testing
    • Expanded Firefox source validation tests from 10 to 21 covering CSP directives, manifest gecko settings, service worker compatibility, and chrome.identity absence

    Source code released under GNU Affero General Public License v3.0 only

    Download Firefox and get the extension
    Download file

  • Older versions

    Version 1.5.6

    Released Apr 11, 2026 - 660.78 KB
    Works with firefox 115.0 and later
    All-Chat Browser Extension 1.5.6

    Changelog

    Bug Fixes
    • Fix popup CSS not rendering — CSP default-src 'self' was blocking inline <style> tags
    • Fix streamer resolution ("not using All-Chat") — CSP was blocking fetch() to allch.at from the service worker
    • Fix sign-in button not working — same CSP restriction blocked the OAuth flow
    • Fix WebSocket chat connection — connect-src falling back to 'self' blocked wss://allch.at

    Root Cause

    The Content Security Policy added in v1.5.4 security hardening used default-src 'self' without explicit style-src or connect-src directives, which blocked inline styles, API calls, and WebSocket connections.

    Source code released under GNU Affero General Public License v3.0 only

    Download file

  • Version 1.5.5

    Released Apr 11, 2026 - 660.75 KB
    Works with firefox 115.0 and later
    Changelog

    Firefox Compatibility
    • Fix iframe storage hang: getLocalStorage() / getSyncStorage() could hang forever in Firefox iframes when the callback never fired — added 5s timeout with fallback to defaults
    • Fix postMessage rejection: content-script-relayed messages were silently dropped in Firefox due to origin mismatch — replaced event.origin check with event.source === window.parent

    Security Hardening
    • OAuth tokens are now exchanged server-side via auth code instead of being read directly from the URL
    • WebSocket authentication moved from URL parameter to in-message auth
    • Added Content Security Policy to extension manifest
    • Added postMessage origin validation and WebSocket message schema validation
    • Validated OAuth redirect URL with proper hostname check
    • Removed localhost from host_permissions

    Maintenance
    • Dependency updates (TypeScript ESLint, ts-loader, mini-css-extract-plugin, actions/checkout)
    • Cleaned up stale docs, artifacts, and debug screenshots from repo root

    Source code released under GNU Affero General Public License v3.0 only

    Download file

  • Version 1.5.4

    Released Apr 9, 2026 - 660.36 KB
    Works with firefox 115.0 and later
    What's New

    Unsupported YouTube stream detection

    The extension now detects scheduled (upcoming) and unlisted YouTube streams before attempting to inject AllChat. Instead of failing silently or showing a cryptic error, users see a dismissible amber badge explaining why AllChat can't activate on that stream.

    Improved error handling
    • Better error display and more robust YouTube video_id extraction
    • Uses backend-provided display_name instead of DOM-scraped channel ID for more reliable streamer identification

    Documentation
    • Documented YouTube limitation: only public, currently live streams are supported
    • Unlisted, private, and scheduled streams are explicitly called out as unsupported in the README

    Changelog
    • feat: detect unsupported YouTube streams and show dismissible badge
    • fix: improve error display and video_id extraction robustness
    • fix: use backend display_name instead of DOM-scraped channel ID
    • docs: document YouTube unlisted/private stream limitation
    • docs: clarify only public live YouTube streams are supported

    Source code released under GNU Affero General Public License v3.0 only

    Download file

  • Version 1.5.1

    Released Apr 7, 2026 - 659.59 KB
    Works with firefox 115.0 and later
    Bug Fixes
    • OAuth: Route all providers (Twitch, YouTube, Kick) through backend tab-based flow instead of chrome.identity.launchWebAuthFlow, fixing redirect_uri_mismatch errors
    • Remove dead code: initiateAuth(), exchangeCodeForToken(), getExtensionRedirectURI(), START_AUTH/EXCHANGE_CODE message handlers

    Source code released under GNU Affero General Public License v3.0 only

    Download file

  • Version 1.5.0

    Released Apr 7, 2026 - 659.58 KB
    Works with firefox 115.0 and later
    What's New
    • Pop-out chat window — Click the pop-out button in the AllChat header to open chat in a standalone browser window. Message history transfers automatically, and window size persists between sessions.
    • Bidirectional native/AllChat switching — "Switch to native" button in the AllChat header restores platform chat with a one-click return to AllChat. Works in both in-page and pop-out modes.
    • Native pop-out detection — On Twitch (/popout/{channel}/chat) and YouTube (/live_chat) native pop-out pages, a "Switch to AllChat" button appears instead of injecting the full UI.
    • Port-based pop-out communication — Pop-out windows use chrome.runtime.Port for reliable message delivery through the service worker.
    • Origin-validated message handlers — All pop-out message handlers in content scripts validate extensionOrigin before processing.

    Bug Fixes
    • Fixed chat send freeze — Added 15-second timeout to the message send request. Previously, if the API hung or network degraded during a YouTube stream, the UI would permanently freeze in "Sending..." state with no way to recover without reloading.

    Source code released under GNU Affero General Public License v3.0 only

    Download file

  • Version 1.4.3

    Released Apr 3, 2026 - 653.35 KB
    Works with firefox 115.0 and later
    What's Changed
    Features
    Per-platform enable/disable toggles in popup
    Separate YouTube Studio toggle from YouTube
    Per-tab grayscale icon when platform is disabled
    Storage migration from single extensionEnabled to per-platform platformEnabled

    Source code released under GNU Affero General Public License v3.0 only

    Download file

  • Version 1.4.2

    Released Apr 2, 2026 - 642.85 KB
    Works with firefox 115.0 and later

    Source code released under GNU Affero General Public License v3.0 only

    Download file

  • Version 1.4.1

    Released Apr 1, 2026 - 642.7 KB
    Works with firefox 115.0 and later

    Source code released under GNU Affero General Public License v3.0 only

    Download file

  • Version 1.4.0

    Released Mar 29, 2026 - 642.09 KB
    Works with firefox 115.0 and later

    Source code released under GNU Affero General Public License v3.0 only

    Download file