Changelog

All notable changes to the Vidora extension and website. Newest releases at the top.

Version 2.2.0

Latest

Added

  • Subtitle download: auto-detects every <track> subtitle element on the page. A "Subs" button appears next to Download; multi-track videos get a language dropdown to pick English, French, etc. WebVTT (.vtt) is the primary tested path.
  • Reddit native video support: v.redd.it m3u8 (video + audio rendition) added to the validated platforms list. Validated 2026-05-22 with a 20-run stress test on a public r/interestingasfuck thread, 20/20 PASS.
  • First-time educational hint banner: a one-shot purple banner appears above the first detected video to explain the Download button and the quality / subtitle dropdowns. Localized in 5 languages, auto-dismiss after 12 seconds.

Changed

  • Subtitle telemetry: anonymous subtitle_downloaded and subtitle_download_failed counters so we can measure adoption before extending to HLS/DASH manifest subtitle tracks.
  • Subtitle URL safety: extension match on pathname only (rejects fragment bypass like script.js#.vtt, query bypass like ?dest=sub.vtt, extension chain like .vtt.exe).

Quality

  • 62 unit assertions cover the new subtitle path (extraction, filename build, URL safety, soft-merge), including 9 adversarial security cases.
  • Reddit fixture rigorously stress-tested (20/20 PASS) before being added to the supported platforms list.
  • Popup screenshots validated automatically: the new hint banner renders correctly in all 5 locales.

Version 2.1.0

Added

Changed

  • Internal linking mesh: 12 blog articles now densely cross-linked across cluster m3u8 and vs/ pages
  • Quick answer 80-word AI-citable block added to all cluster m3u8 articles
  • 404 page recovery with site search and popular articles
  • Sitemap consolidated: 35+ URLs with correct lastmod and priority

Security

  • Per-segment AES-128 encryption keys with full key rotation support
  • Filename sanitization hardening (path traversal protection)
  • Host whitelist on RESOLVE_* message handlers
  • AES key fetch URL scheme validation (http/https only)
  • DoS parse caps: 5MB content-length limit, 5000 segments maximum
  • npm dependencies upgraded (postcss CVE patched)

Version 2.0.0

Rebrand

Added

  • Rebranded from VidGrab to Vidora. New name, domain (getvidora.com), and visual identity
  • DASH .mpd manifest support with 1080p quality cap and audio+video muxing
  • Generic .mpd download handler for non-Vimeo DASH streams
  • Bulk download button for queuing multiple streams
  • Offscreen document-based muxer (replaces tab-based approach, resolves CSP conflicts)
  • Cluster m3u8 content: 3 articles x 5 languages (15 pages) published on getvidora.com

Fixed

  • Vimeo audio regression: restored audio via CSP removal, real esds parsing, throw on 0 audio samples
  • HLS separate audio rendition muxing: correctly fetches EXT-X-MEDIA TYPE=AUDIO playlists
  • Service worker recovery on Chromium update

Changed

  • Manifest: removed restrictive CSP that blocked Vimeo audio key fetching
  • Pricing: free during launch (no subscription)
  • Privacy: all processing local, no data sent to external servers

Version 1.x (VidGrab)

Foundation

  • Initial Chrome extension for HLS m3u8 stream detection and download
  • Vimeo HLS and progressive MP4 support
  • Bunny.net CDN video detection
  • AES-128 encrypted HLS stream support (initial implementation)
  • Popup UI with quality selector and download progress indicator
  • Chromium offscreen document for in-browser segment muxing
  • Parallel segment download with configurable concurrency
  • Initial website, FAQ, support and legal pages

Recent additions