olaf/Link-Log
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 4 Wiki Activity

Token refresh

Browse Source
This commit is contained in:
olaf
2026-08-26 17:16:06 +02:00
parent 27f26e615a
commit 54d2e4e864
7 changed files with 167 additions and 26 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Security-audit.md
+1 -1
View File
@@ -97,7 +97,7 @@ These findings are prioritized below. Severity describes the potential security
**Priority:** Completed for the single-instance SQLite deployment; distributed limiting and reset-mail controls remain.
### SA-006: Firefox extension has broad host access and stores bearer tokens in local storage
**Severity:** High
**Evidence:** `webextension/manifest.json` declares `host_permissions: ["<all_urls>"]`; `webextension/options.js` and `webextension/popup.js` store and retrieve `accessToken` through `browser.storage.local`.