6 lines
559 B
Markdown
6 lines
559 B
Markdown
# Security policy
|
|
|
|
Please report security issues privately to the repository owner rather than opening a public issue containing exploit details.
|
|
|
|
SlopDetect treats webpage content, resource URLs, metadata, and provenance manifests as untrusted input. The implementation bounds asset size and concurrency, rejects unsafe URL schemes and cross-origin private-network targets, omits credentials from media requests, disallows redirects, validates extension messages, and renders page annotations through an isolated Shadow DOM without injecting untrusted HTML.
|