Files
FlowPilot/background
tomaioo 32880a1717 fix(security): plaintext passwords are persisted in extension sta
Step 3 appends `{ email, password, createdAt }` directly into `state.accounts` and writes it via `setState`. This stores raw credentials in extension-managed state, increasing impact if extension storage is exposed (local compromise, backup/sync leakage, debug export, or other extension bugs).

Signed-off-by: tomaioo <203048277+tomaioo@users.noreply.github.com>
2026-04-17 05:16:45 -07:00
..