From 54adf11e1c8905c97512fcf29d8b3d75aa9eb0cb Mon Sep 17 00:00:00 2001
From: Yuval Adam <_@yuv.al>
Date: Thu, 26 Feb 2026 08:58:17 +0100
Subject: Initial security review docs for 1Password Firefox extension
 v8.12.2.38

Static analysis of the extracted XPI covering:
- Architecture: runtime topology, WASM modules, boot sequence, permissions
- Message catalog: ~50 background handlers, per-file content script messages
- WebAuthn analysis: page-world monkey-patching, postMessage IPC protocol
- Trust boundaries: 8 zones, 7 crossings, data lifecycle, attack surfaces
- Telemetry: Snowplow, Sentry, DNS privacy proxy, opt-out controls
- TODO: prioritized future work plan
---
 .gitignore | 2 ++
 1 file changed, 2 insertions(+)
 create mode 100644 .gitignore

(limited to '.gitignore')

diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..d0bf9d5
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,2 @@
+1pass-xpi/
+.pi/
-- 
cgit v1.3.1