Security context

Highlights

Auth Bypass: 17 prior fixes. Scrutinize any change in this area.

src/app/router: most-fixed (2 issues). Treat as high-risk during review.

17 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

Auth Bypass: Attackers can bypass permission checks by spoofing the calling tab's domain if the extension relies on mutable and easily manipulated properties like MessageSender.url instead of immutable origin headers.

Auth Bypass: A lack of strict account-level separation in database queries can allow cross-talk or permission leakage, letting transactions or data requests execute under the context of unauthorized accounts.

Auth Bypass: Without strict client-side route guards, locked extension screens can be directly addressed, bypassing central unlocking mechanisms and exposing sensitive interface areas.