mirror
/
FediAct
kopia lustrzana https://github.com/lartsch/FediAct
1
0
Forkuj 0
Kod Zgłoszenia Packages Projekty Wydania Wiki Aktywność

Update readme

pull/23/head
Lartsch 2022-12-20 01:29:56 +01:00 zatwierdzone przez GitHub
rodzic 3626ca6258
commit 43d670445a
1 zmienionych plików z 1 dodań i 1 usunięć
Pokaż statystyki Ściągnij plik aktualizacji Ściągnij plik porównania Expand all files Collapse all files

2
README.md
Wyświetl plik

@ -97,7 +97,7 @@ Feel free to create an issue here on GitHub and I will look into it.
**Is this safe to use?**
This project is open source. Anyone with some programming knowledge can check out the source code, either here on GitHub or by extracting the addon file from the addon stores.
Considering the implementation of the features, I am not aware of any noticable risks. Efforts were made to prevent instance admins from abusing this addon to simulate mouse clicks and therefore perform actions on the users behalf (which already was a really specific and rather low risk). Also, FediAct stores all your data in your browser locally. The only sensitive data it stores is your API token, which it grabs from your home instance and is required for all features. This token is **only** sent to your home instance (which is same when you use your home instance). No other data ever leaves your device by using FediAct. As far as I know, the external instances can not access the requests made by FediAct and can therefore not gain your token.
Considering the implementation, I am not aware of any noticable risks. Efforts were made to prevent instances from abusing this addon to perform actions on the users behalf (which already was a really specific and rather low risk). FediAct stores all data in your browser locally. The only sensitive data it stores is your API token, which is required for all features. This token is **only** sent to your home instance. No other data ever leaves your device by using FediAct. As far as I know, external instances cannot access the requests made by FediAct and can therefore not gain your token.
## Screenshots / GIFs
v0.8.0