From ef661f7deaa2c362cc7ed4ba5c988fe78aed8a8c Mon Sep 17 00:00:00 2001
From: Libor Polčák <ipolcak@fit.vutbr.cz>
Date: Jun 05 2020 13:22:41 +0000
Subject: web levels: Update configuration description for 0.3


---

diff --git a/docs/_includes/head.html b/docs/_includes/head.html
index 28078d6..f451c41 100644
--- a/docs/_includes/head.html
+++ b/docs/_includes/head.html
@@ -14,7 +14,7 @@
 				<ul>
 					<li><a href="/jsrestrictor/">Home page</a></li>
 					<li><a href="/jsrestrictor/test/test.html">Test page</a></li>
-					<li><a href="/jsrestrictor/levels.html">Levels</a></li>
+					<li><a href="/jsrestrictor/levels.html">Configuration</a></li>
 					<li><a href="/jsrestrictor/permissions.html">Permissions</a></li>
 					<li>
 						<p>Install</p>
diff --git a/docs/levels.md b/docs/levels.md
index e0e9dcd..27a306d 100644
--- a/docs/levels.md
+++ b/docs/levels.md
@@ -1,33 +1,58 @@
-# Levels
+# The configuration of the extension
+
+## Network Boundary Shield (NBS)
+
+NBS is active independently on the levels defined below. If necessary, you can whitelist websites for which the NBS should be turned off. Generally, you want NBS to be active, however, some pages can be broken, because they require interaction between public Internet and local network, for example, some Intranet information systems might be broken by the NBS.
+
+## Levels controlling JS-object wrapping
+
 ### Level 0
 * *All functionality is disabled OFF*
 
 ### Level 1
-* **Protect against canvas fingerprinting: --** *OFF*
-* **Reduce the time accuracy of "Date" object and performance API --** *ON*
+
+* **Manipulate the time precision provided by Date and performance: --** *ON*
     * Round time to: *hundredths of a second (1.230 -- Date, 1230 -- performance)*
+* **Protect against canvas fingerprinting --** *OFF*
 * **Spoof hardware information to the most popular HW --** *ON*
-    * JS navigator.deviceMemory: *4* (not applied if the browser does not support the property)
+    * JS navigator.deviceMemory: *4* (not applied if the browser does not support the property, e.g.
+			Firefox)
     * JS navigator.hardwareConcurrency: *2*
 * **Filter XMLHttpRequest requests --** *OFF*
+* **Protect against ArrayBuffer exploitation --** *OFF*
+* **Protect against SharedArrayBuffer exploitation --** *OFF*
+* **Protect against WebWorker exploitation --** *OFF*
+* **Disable Battery status API --** *ON*
 
 ### Level 2
+* **Manipulate the time precision provided by Date and performance --** *ON*
+    * Round time to: *tenths of a second (1.200 -- Date, 1200 -- performance)*
 * **Protect against canvas fingerprinting: --** *ON*
     * Reading from canvas returns white image.
-* **Reduce the time accuracy of "Date" object and performance API --** *ON*
-    * Round time to: *tenths of a second (1.200 -- Date, 1200 -- performance)*
 * **Spoof hardware information to the most popular HW --** *ON*
     * JS navigator.deviceMemory: *4* (not applied if the browser does not support the property)
     * JS navigator.hardwareConcurrency: *2*
 * **Filter XMLHttpRequest requests --** *OFF*
+* **Protect against ArrayBuffer exploitation --** *OFF*
+* **Protect against SharedArrayBuffer exploitation --** *OFF*
+* **Protect against WebWorker exploitation --** *OFF*
+* **Disable Battery status API --** *ON*
 
 ### Level 3
+* **Manipulate the time precision provided by Date and performance --** *ON*
+    * Round time to: *full seconds (1.000 -- Date, 1000 -- performance)*
+		* *Randomize time*
 * **Protect against canvas fingerprinting: --** *ON*
     * Reading from canvas returns white image.
-* **Reduce the time accuracy of "Date" object and performance API --** *ON*
-    * Round time to: *full seconds (1.000 -- Date, 1000 -- performance)*
 * **Spoof hardware information to the most popular HW --** *ON*
     * JS navigator.deviceMemory: *4* (not applied if the browser does not support the property)
     * JS navigator.hardwareConcurrency: *2*
-* **Filter XMLHttpRequest requests: --** *confirm request but do not block*
+* **Filter XMLHttpRequest requests: --** *confirm requests but do not block*
+* **Protect against ArrayBuffer exploitation --** *ON*
+    * *Use random mapping of array indexing to memory*
+* **Protect against SharedArrayBuffer exploitation --** *ON*
+    * *Block SharedArrayBuffer* -- SharedArrayBuffer provided by the browser is not available to page scripts at all.
+* **Protect against WebWorker exploitation --** *ON*
+    * *Remove real parallelism* -- Use Worker polyfill instead of the native Worker.
+* **Disable Battery status API --** *ON*