Privacy review, on request by a colleague

2026-09-15 21:09:52 +02:00
parent 24c4753093
commit 370a91b23b
3 changed files with 158 additions and 0 deletions
@@ -151,6 +151,12 @@ Run full backend and frontend test suites.
 ### Assistant outcome
 The normal backend suite passed with 46 tests. Frontend and extension validation passed for all JavaScript syntax checks, JSON files, XPI rebuild, and unsigned XPI validation. The warnings-as-errors backend variant failed on unclosed SQLite connection `ResourceWarning` instances under Python 3.13; no functional tests failed.

+### User
+Validate the Privacy properties of the firefox plugin specifically and report them in Privacy.md
+
+### Assistant outcome
+Added `Privacy.md` with a plugin-specific privacy validation covering manifest permissions, active-tab capture scope, local and session storage, outbound network destinations, Firefox `data_collection_permissions`, release validation, and residual privacy risks. Confirmed the signed XPI release metadata validates successfully and identified non-HTTPS backend support as the main remaining privacy caveat.
+
 ### User
 Address SA-007 and use linklog.example.com as default LINKLOG_PUBLIC_URL.