18 lines
940 B
Markdown
18 lines
940 B
Markdown
# Privacy and security
|
|
|
|
Selected files, converted data, and evidence reports remain in browser memory.
|
|
There is no upload, telemetry, analytics, remote reference resolution, account,
|
|
external font, or codec service. Production policy restricts connections to the
|
|
same origin and browser tests reject unexpected requests.
|
|
|
|
JSON uses bounded parsing and rejects prototype-sensitive field names. XML
|
|
DOCTYPE declarations are disabled, values are rendered as text, and generated
|
|
XML escapes names and content. CSV parsing is bounded; exports prefix cells that
|
|
could be interpreted as spreadsheet formulas. All outputs are explicit
|
|
user-triggered downloads.
|
|
|
|
A matching round-trip signature is evidence only for the bounded canonical
|
|
properties and supplied sample. It is not proof of standard conformance,
|
|
metadata preservation, codec quality, accessibility, or losslessness for other
|
|
files, implementations, settings, or future tool versions.
|