Skip to content

Security: staklab/PrismRail

Security

SECURITY.md

Security Policy

Language / 语言

English | 中文

English

Supported Versions

The latest public version is the only version actively maintained for security and compatibility fixes.

Reporting a Vulnerability

If you believe you found a security issue, please avoid posting exploit details publicly in an issue.

Instead:

  1. Prepare a clear description of the problem.
  2. Include affected pages, browser version, extension version, and reproduction steps.
  3. Contact the maintainer privately if possible, or open a limited-disclosure issue without sensitive details.

Project Security Principles

  • Keep permissions minimal
  • Avoid remote code execution
  • Prefer local-first processing
  • Limit unnecessary network behavior

中文

支持版本

当前仅对最新公开版本持续提供安全性与兼容性修复。

漏洞反馈方式

如果你发现了可能的安全问题,请尽量不要直接在公开 Issue 中披露可复现的利用细节。

建议你这样处理:

  1. 整理清楚问题描述。
  2. 提供受影响页面、浏览器版本、扩展版本和复现步骤。
  3. 优先私下联系维护者;如果必须走公开 Issue,请避免包含敏感利用信息。

项目安全原则

  • 尽量保持最小权限
  • 避免远程代码执行
  • 优先本地处理
  • 减少不必要的网络行为

There aren't any published security advisories