| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2026-02-26 | Initial security review docs for 1Password Firefox extension v8.12.2.38 | Yuval Adam | |
| Static analysis of the extracted XPI covering: - Architecture: runtime topology, WASM modules, boot sequence, permissions - Message catalog: ~50 background handlers, per-file content script messages - WebAuthn analysis: page-world monkey-patching, postMessage IPC protocol - Trust boundaries: 8 zones, 7 crossings, data lifecycle, attack surfaces - Telemetry: Snowplow, Sentry, DNS privacy proxy, opt-out controls - TODO: prioritized future work plan | |||
