This document covers maintained Notandia browser-extension releases, including versions previously distributed as MDPI Filter. Security fixes are applied to supported versions still distributed through browser stores.
| Version | Supported |
|---|---|
| ≥ 0.0.1 | ✅ |
| < 0.0.1 | ❌ |
Report security issues privately through the repository's security-advisory form:
https://github.com/notandia/browser-extension/security/advisories/new
Include:
- a clear description of the vulnerability;
- steps to reproduce;
- the expected security impact;
- proof-of-concept code or screenshots when available.
Do not submit secrets, personal data, private document contents, or active exploit details through a public issue.
- We will acknowledge receipt within 9 business days.
- A public fix or mitigation will be released within 30 days of disclosure, or we will provide a status update.
- If the issue cannot be fully resolved within that timeframe due to limited resources, the maintainer will work with the reporter to agree on a suitable mitigation or revised timeline.
- Details may be publicly disclosed once a fixed version or agreed mitigation is published, or 90 days after acknowledgment, whichever comes first.
- Assessment and triage.
- Patch development and review.
- Verified cross-browser build.
- Release through the affected browser stores.
- Public advisory and credit where appropriate.
Contributors who report valid vulnerabilities will be credited in the release notes unless anonymity is requested.