Firefox website permissions

• Missing or revoked NAS access has its own message and Allow NAS access button under Settings → Connection. The message explains why access is needed. The button closes the toolbar popup for Firefox's permission dialog; reopen the extension after granting access. An extension tab stays open and tests the connection directly.
• Test, Save and test connection and two-factor submissions check access without prompting. Saving keeps the entered connection first. Automatic requests also stop without prompting or retrying missing access; permission failures are distinct from network and certificate failures.
• Right-click downloads remain available without access to the source page. Selected text is checked for links when clicked; ordinary text is ignored. Missing NAS access opens Connection in the popup, or an extension tab if necessary. Nothing is resent automatically; check Tasks before retrying an unconfirmed download.
• The magnet switch saves your choice and requests HTTP/HTTPS access directly. The popup closes for a pending prompt; approval activates capture. Refusal or revocation keeps the preference on but capture inactive. A red panel above the switch offers another permission request, without a system notification. Pages already open may need reloading after approval. Local file pages are excluded.

Fixed

• Inline errors share a red frame, including rejected two-factor codes. Option switches no longer shift popup contents out of view.
• Tests, two-factor codes, task retries and wake checks stay with their connection. Later refusals cannot erase an earlier unconfirmed task result; Retry keeps the link if deletion remains uncertain. Task errors name their source after a NAS change, including already displayed errors.
• Repeated Enter cannot duplicate a two-factor submission. Older connection replies cannot replace a newer test result in another view. Sign-outs and resets clear old drafts even after closing the popup, while preserving newer edits. Delayed refusals cannot override new grants; permission changes do not hide magnet-save errors.
• The sort-direction selector has an accessible name. Spanish and Brazilian Portuguese NAS-permission messages are clearer.

Restored after the 1.1.5 rollback

• The certificate diagnostics and fixes from 1.1.4 return. When Firefox provides an attributable certificate error, its complete explanation appears under Settings → Connection and survives reopening the popup. Both test buttons unfold the section.
• Pausing seeding torrents, magnet links in embedded frames and SVG graphics, IPv6 NAS addresses, retained links when Retry cannot finish, background monitoring and keyboard-focus fixes are included again.
• Data declarations cover credentials and selected links sent only to the configured NAS. No telemetry or third-party recipient.

Added

• Entering an IP address under HTTPS now points out that the certificate has to match it.
• Certificate failures show Firefox's own explanation. Where two requests to one address overlap and the reason cannot be attributed, the general message stands.
• The full reason is selectable under Settings, Connection and stays after reopening the popup. Any answer at that address clears it. Both test buttons unfold the section; the short notification points there.

Fixed

• Seeding torrents can be paused; they had no pause button, and Pause all walked past them.
• Magnet links inside an embedded frame are captured; only the top document was reached before.
• Magnet links in SVG graphics are sent as URLs instead of objects.
• IPv6 NAS addresses work with or without square brackets in the Host field.
• A refused task list stops the confirmation check and gives that reason; the download stays uncertain. The notification says so for right-clicks and captured magnets too.
• Retry keeps the link when the NAS is changed after the old task was already removed.
• Retry calls a task removed only when the NAS confirmed that deletion; a reply refusing it, or naming no task, was reported as a removal.
• Retry, pause, resume and delete name the reason a secure connection was refused.
• Retry respects a failed connection test before it wakes the NAS.
• Failures from the previous NAS no longer block the new connection or count toward stopping its download watch.
• After a successful sign-in, older sign-in failures no longer block the connection.
• A late answer from the connection watch no longer ends a session that has been set up since.
• Keyboard focus stays on the same button when the list refreshes, and the list is not scrolled back to it.
• Switching the NAS while a download watch was finishing no longer signs the new connection out again.
• The task counter on the extension icon is no longer cleared by a slower background check that answered late.
• The bundled Outfit webfont now ships with its licence text as fonts/OFL.txt.

Changed

• Recognised certificate failures are reported without automatic retries.
• Wording and translations improved throughout, in all six languages.
• The manifest now declares what is transmitted: authentication information and website content for the links you hand over. The recipient is unchanged: the NAS you configured and nowhere else, no telemetry, no third party.

Security

• NAS requests no longer follow redirects, so credentials cannot reach another address.
• Archive passwords and two-factor codes are cleared on sign-out and on a connection change.

Added

• The extension version is shown in Settings.
• Choosing HTTP warns that the transfer is unencrypted.

Fixed

• Unintended HTTP-to-HTTPS upgrades.
• Unanswered adds are checked against the task list; uncertain results are reported separately.
• Links containing commas are rejected, so the NAS cannot split them into two.
• Retry creates a replacement only after a confirmed deletion, and names unconfirmed outcomes as such.
• A running code check blocks further sign-ins to the same connection; stale replies no longer reopen the prompt.
• Popup sign-in failures survive the popup closing, are notified, and block further automatic sign-ins.
• Refused sign-ins stop bulk adds and confirmation checks, and stop the popup refreshing.
• Connection, destination and link drafts survive an immediate close and a pending save.
• Invalid ports are rejected, a cleared destination stays empty, and a reset clears earlier messages.
• A stale task list no longer stops the refresh, and the pause button covers every task Pause all does.
• Premature monitoring stops caused by overlapping resume, keepalive and sign-in.
• Task actions tell a connection failure before sending from an uncertain result after it.
• The connection status no longer overwrites newer sign-in results; the full text is in the tooltip.
• Folder errors name the destination used and tell it from the NAS default.
• The closing notification matches the completed, failed and paused counts.

Changed

• Screen-reader feedback for filters and pagination, and the popup's document language.
• Magnet capture handles uppercase protocol names and links in open shadow DOM.
• The wake-up wait is 60 seconds and the base add timeout 25, with extra time per link.
• The refresh interval controls the popup task list; background monitoring runs independently.

Removed

• Local .torrent and .nzb uploads. Torrent links can still be added through the context menu.

Security

• Magnet capture only reacts to clicks you make. Web pages can no longer trigger downloads by script.
• Signing out or changing the connection cannot be undone by a delayed two-factor login response. Changing the NAS signs out the original NAS.

Fixed

• Network errors and unreadable responses no longer cause download creation to be repeated automatically. Uncertain results ask you to check Tasks before trying again.
• Pause, resume and delete report the result of each task. A task the NAS does not confirm is no longer shown as failed. Retry stops unless the original task was confirmed deleted.
• Resuming one download restarts background monitoring, including when the NAS does not confirm the result.
• File sizes and dates returned as text sort correctly. Zero sizes no longer show an invalid progress percentage.
• After a connection change, the old task list disappears and its actions can no longer affect the new NAS. Queued context-menu links and files still being read are not sent to the new connection.
• Settings saved in quick succession no longer overwrite each other. Saving the connection keeps an unsaved destination folder.
• Background monitoring no longer stops because of a delayed response, a single unanswered request or a failed new sign-in, and resumes when the task list shows running downloads. The completion notification counts every download seen running.
• A two-factor code needed while refreshing the task list is now requested, and refreshing pauses until it is entered.
• Retry uses the original folder. If adding fails after the original task was removed, the link is put back into the link list.
• A NAS that could not be woken, or a sign-in without an answer, is reported as a failure, not as an uncertain result.

Changed

• While adding downloads, the link list is read-only and the add and clear-list buttons are disabled. Links can still be copied. The controls become available once the result is displayed, including after reopening the popup.
• The updated list is saved with the result in the background, so closing the popup cannot bring back accepted links.
• Keepalive requests are skipped while the NAS was reached recently.
• Two-factor and sign-out hints have been clarified.

Fixed

• The information about automatic extraction has been made precise, in the extension's hints and in its documentation. Auto extract is switched on per account, under Download Station > Settings > Auto extract, and is off by default.
• The archive password is passed on to Download Station, which keeps it in its own Password List. That is now stated.

New

• Three tabs — Add, Tasks and Settings — so the task list gets the popup's full height: seven downloads at once instead of two. The house icon on each tab picks which one the popup opens on.
• A notification when the last download finishes, with what became of the ones that were running: completed, failed, paused.
• Notification settings: a master switch plus separate ones for added, failed and finished downloads. Sign-in and destination folder problems are always reported.
• "Save and test connection", which checks the login right away including the two-factor prompt. Plus "Sign out" and "Reset all settings".
• For half a minute after an add, the task list refreshes every three seconds, then falls back to the interval in the settings.

Fixed

• A sleeping NAS is waited out instead of being reported as an error — for about half a minute, roughly how long a NAS takes to wake its disks.
• The result of adding links survives the popup closing. Firefox closes it on the first click outside, and everything that followed an add used to run inside it. Against a sleeping NAS it was usually gone by then, so the links stayed in the box as if nothing had happened, and a second press added all of them again.
• Adding from the context menu waits its turn instead of running alongside another add. A link whose fate is genuinely unknown is no longer called a failure — that invited a second right-click and a second download.
• Clearing the password field no longer wipes the stored password on the next unrelated save, and changing an option no longer discards a password typed but not yet saved.
• Changing an option no longer signs the DSM session out or sends the task list back to page one.
• Pause, resume, retry, remove and the bulk actions now say why they failed instead of appearing to do nothing.
• Four task states were shown as raw English values in every language: seeding, finishing, hash checking, waiting for a file host.

Changed

• Tasks per page defaults to 10, and failed downloads sort right behind active ones.
• "Task refresh interval" is now "Background task refresh interval".
• Settings are grouped into Connection, Downloads, Notifications, Tasks and Advanced options.
• The interface was reworked throughout, with contrast calculated against WCAG 2.1 rather than eyeballed.
• Nothing secret travels in a URL any more: the password and the session id go to the NAS in the request body, so neither lands in its web server log.
• The tabs answer the arrow keys and are announced properly by screen readers, and the popup reports the language it is actually showing.