Skip to content

Security: max-agent-hub/browser-sop-builder

Security

SECURITY.md

Security Policy

Data Boundary

The hosted builder is a static application. It does not submit form values to a server or retain them in browser storage. Markdown is copied through the browser clipboard API or downloaded through a temporary in-memory object URL.

A same-origin service worker caches the public application shell for offline use. That cache contains only the repository's static HTML, JavaScript, manifest, and image files; it never receives or stores form contents.

Do not enter credentials, private keys, payment data, or sensitive customer information.

Report A Vulnerability

Email max@mackanictechnologies.com with:

  • the affected file and browser
  • reproduction steps
  • the expected and observed behavior
  • potential impact

Do not include secrets or exploit unrelated systems while testing.

There aren't any published security advisories