HTTPS-Everywhere freezes the browser when entering URLS like ./a.

Starting with the latest HTTPS-Everywhere update (2018.6.13) the browser freezes when URLs like ./a. are entered into the URL bar. davtur19 reported this bug via our HackerOne bug bounty program to us and suggested that this is even exploitable by web content doing things like <meta http-equiv="refresh" content="0;URL=http://./a.">

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information