SingleFile CLI 2.6.0

New features

• Add --disable-compression, storing the files of an archive without compressing them.
• --include-BOM now works on plain HTML captures, which never had an implementation of it.
• --embedded-image and --embedded-pdf now work with --crawl-save-archive. The PNG or the PDF you provide becomes the one the whole archive can be read as, instead of being ignored.

CLI fixes and improvements

• --http-header no longer makes the page send a CORS preflight for every cross-origin resource. A header that is not CORS-safelisted is injected below the CORS decision instead of on the network layer, so the servers that answer no preflight keep serving the resource.
• --blocked-URL-pattern blocks a request before it is sent. It used to be applied once the response had come back, so a blocked URL was still contacted, and whether it was depended on which other options were in use.
• The network options are applied to service workers. A page whose subresources are served by its own worker was captured without the extra headers, the blocked URL patterns and the proxy authentication.
• --create-browser-profile drops the browser caches from the profile it creates. They are never copied to the capture profile, and they were the bulk of the directory.
• Every option is named in lowercase in the sources. The parser has always compared option names case-insensitively, so the names accepted on the command line are unchanged.

Core fixes and improvements

• A video poster is stored in a lossy format instead of PNG, which costs an order of magnitude less for the same frame.
• A media element left without any source no longer carries autoplay.
• A font named by a shorthand the parser cannot read is kept instead of dropped.
• Self-extracting archives gained a CDATA rung in the wrapper ladder, which widens the set of pages they can hide their payload in.

Co-authored by Claude (Claude Code)