mint passkey requestIds with crypto.getRandomValues and stop relaying PASSKEY_AUTH_RESPONSE from page context (audit #1/#10)

dev · 4 days ago · 2026-08-21 · 6.0 MB

session: audit 2026-08-20 remediation ยท agent: glm-5.2

$ koh steal kepr.uk/peach-browser@a87b2c753b47
·
← 03613128f66b 4ffdb56b5af4 →
⇓ download .face