Skip to content

v1.4.0 - Audit & hardening pass

Latest
Latest

Choose a tag to compare

View all tags
@ChaoticSi1ence ChaoticSi1ence released this 24 Apr 07:27
v1.4.0
633a1ca

First pass of post-release maintenance against the Brave policy schema. Three advertised features turned out to be silent no-ops, the Parental Controls preset did the opposite of its README, and a handful of new Brave policies had shipped without SlimBrave exposing them. All three are now fixed, plus some new hardening toggles.

What actually broke (and is now fixed)

  • Three features did nothing. FeedbackSurveysEnabled, MediaRecommendationsEnabled, and PromotionsEnabled are not real Brave policies — Brave ignored them. Removed from the UI, presets, and README.
  • Strict Parental Controls preset forced incognito instead of disabling it. Preset format only listed key names; when a key had multiple possible values (1=Disable, 2=Force), both rows got checked and the later one silently won. Now fixed — and the preset actually ships a working DoH template (https://family.cloudflare-dns.com/dns-query) instead of enabling custom DNS with no server.
  • Custom DNS with no template silently broke DNS on Linux/macOS CLI. TUI validated; CLI didn't. Now both reject it.
  • Windows Apply could half-apply features if DNS failed. DNS is now validated before anything gets written.

New

  • Five new hardening toggles exposed in all three UIs: Enable De-AMP, Enable Debouncing, Strip Tracking URL Parameters, Reduce Language Fingerprinting, Disable IPFS.
  • Disable/Force Incognito are now mutually exclusive — checking one auto-unchecks the other across all three platforms.
  • Preset format upgraded to a key→value map so multi-value policies round-trip correctly. Pre-v1.4 array-format exports still import fine (first matching row per key wins, which also fixes the latent force-incognito bug in older imports).

Preset updates

All five presets refreshed. Balanced/Maximum/Performance now enable the tracking-param / AMP / debouncing hardening where it fits the preset's intent.

Verified

  • Python 3.12 syntax check: OK on both scripts
  • PowerShell parse check: OK
  • All five preset JSONs parse
  • Import/export round-trip, legacy array compat, group exclusivity, DNS validation, and parental controls behavior all pass integration tests

No breaking changes for existing users — old exported configs still import cleanly.

Full diff: v1.3.0...v1.4.0

Assets 2
Loading