1Password Firefox Extension Security Review https://git.yuv.al/1pass-analysis/atom/.gitignore?h=main 2026-02-26T07:58:17Z 2026-02-26T07:58:17Z Yuval Adam _@yuv.al 2026-02-26T07:58:17Z urn:sha1:54adf11e1c8905c97512fcf29d8b3d75aa9eb0cb Static analysis of the extracted XPI covering: - Architecture: runtime topology, WASM modules, boot sequence, permissions - Message catalog: ~50 background handlers, per-file content script messages - WebAuthn analysis: page-world monkey-patching, postMessage IPC protocol - Trust boundaries: 8 zones, 7 crossings, data lifecycle, attack surfaces - Telemetry: Snowplow, Sentry, DNS privacy proxy, opt-out controls - TODO: prioritized future work plan