Language / 语言
The latest public version is the only version actively maintained for security and compatibility fixes.
If you believe you found a security issue, please avoid posting exploit details publicly in an issue.
Instead:
- Prepare a clear description of the problem.
- Include affected pages, browser version, extension version, and reproduction steps.
- Contact the maintainer privately if possible, or open a limited-disclosure issue without sensitive details.
- Keep permissions minimal
- Avoid remote code execution
- Prefer local-first processing
- Limit unnecessary network behavior
当前仅对最新公开版本持续提供安全性与兼容性修复。
如果你发现了可能的安全问题,请尽量不要直接在公开 Issue 中披露可复现的利用细节。
建议你这样处理:
- 整理清楚问题描述。
- 提供受影响页面、浏览器版本、扩展版本和复现步骤。
- 优先私下联系维护者;如果必须走公开 Issue,请避免包含敏感利用信息。
- 尽量保持最小权限
- 避免远程代码执行
- 优先本地处理
- 减少不必要的网络行为