summaryrefslogtreecommitdiff
path: root/webauthn-analysis.md
AgeCommit message (Collapse)Author
2026-02-26Initial security review docs for 1Password Firefox extension v8.12.2.38Yuval Adam
Static analysis of the extracted XPI covering: - Architecture: runtime topology, WASM modules, boot sequence, permissions - Message catalog: ~50 background handlers, per-file content script messages - WebAuthn analysis: page-world monkey-patching, postMessage IPC protocol - Trust boundaries: 8 zones, 7 crossings, data lifecycle, attack surfaces - Telemetry: Snowplow, Sentry, DNS privacy proxy, opt-out controls - TODO: prioritized future work plan