ohm

New in 1.0.1: Fixes for four bugs found by an external HN reviewer, plus one hardening change. All four independently verified before fixing (three via direct parser execution, the CSS-poisoning claim empirically in real headless Chrome, since Node has no CSSOM). - Fixed: a domain and its subdomain's rule groups only ever had one win via Array.find(), silently dropping the other. Confirmed live on the site's own x.com / pro.x.com demo data — 11 of pro.x.com's own rules never applied. Now merges every matching group instead of picking one. - Fixed: one malformed CSS selector silently disabled every other selector sharing its joined rule (confirmed empirically: cssRules.length === 0 in real Chrome). Each selector now gets its own independent rule. - Fixed: ~exclusion hosts were silently dropped while the "excluded" subdomain kept matching anyway — the opposite of user intent. Now rejected with a visible skip reason instead of silently producing the wrong behavior. - Fixed: a URL-scheme host (https://example.com) collapsed into the nonsensical host https:, producing a broken manifest pattern. Also now rejected visibly. Closed a sibling gap found during the fix: protocol-relative hosts (//example.com) had the same failure mode via a different path. - Hardened: SRI-pinned the Simple Analytics script to their official version-pinned sri/v11.js (not a hand-hashed latest.js, which would break unpredictably on their next update) — closes a supply-chain gap in the "nothing leaves this tab" claim. - Minor: rule-count summary on the settings page now says "sites" instead of "hosts". * * * Ohm hides things on a page using rules you write yourself... no waiting on someone else's list, no account, nothing tracked. It understands the same rule format uBlock Origin used for its custom filters, the kind that stopped working when Chrome dropped support for uBlock Origin's old extension format. If you've got a list of those, paste it in and it'll work again. What it does: hides whatever you tell it to, on whatever site you tell it to, using rules like "on this website, hide this thing." What it doesn't do: block ads, block network requests, track what you do, or send anything anywhere. It has no permission to use the internet at all, so there's no way for it to send your rules or your browsing anywhere. Everything stays saved on your own computer.