Do not report security vulnerabilities in public issues. Use GitHub's private security advisory form for this repository. Include the browser, extension version, reproducible steps and impact.