Security fixes are currently applied to the latest version on the main branch.
Please do not open a public GitHub issue for sensitive security reports.
If you discover a security issue, report it privately to the repository owner with:
- a short description of the issue
- affected pages or permissions
- reproduction steps
- expected impact
Security-sensitive areas for this project include:
- Chrome extension permissions and host permissions
- content script injection behavior
- local storage of download history
- ZIP generation and downloaded file handling
- any future background worker or remote integration