We take the security of this project seriously and want to ensure users can report vulnerabilities responsibly.

If you discover a potential security issue or vulnerability:

1. Do not create a public issue.
2. Contact the maintainer privately via email: spalmah@proton.me
3. Provide:
   • A detailed description of the vulnerability
   • Steps to reproduce
   • Any proof-of-concept (PoC) if available

We will acknowledge receipt and investigate as quickly as possible.

This policy applies to the Mass Image Downloader extension for Chromium-based browsers and covers vulnerabilities in:

• JavaScript logic used by the extension
• Download handling logic
• Storage and permissions declared in manifest.json

It does not cover:

• 3rd-party browser behavior or bugs
• Sites or services unrelated to the extension

Once a vulnerability is confirmed:

• A fix will be prioritized
• Affected users will be notified via a new release or changelog

Thank you for helping us make Mass Image Downloader safer for everyone!