Found a security issue? Email [[email protected]] with details (e.g., exploit steps). Response within 48 hours.
- Client-Side Storage: Capsule data in localStorage—users should clear it.
- Endpoint Trust: Default Codex nodes are public; recommend personal config.
- Extension Conflicts: Handles common ones, but report if broken.
In-scope: XSS, data leaks, endpoint exploits. Out-of-scope: User data on remote nodes.