940 B
Privacy and security
Selected files, converted data, and evidence reports remain in browser memory. There is no upload, telemetry, analytics, remote reference resolution, account, external font, or codec service. Production policy restricts connections to the same origin and browser tests reject unexpected requests.
JSON uses bounded parsing and rejects prototype-sensitive field names. XML DOCTYPE declarations are disabled, values are rendered as text, and generated XML escapes names and content. CSV parsing is bounded; exports prefix cells that could be interpreted as spreadsheet formulas. All outputs are explicit user-triggered downloads.
A matching round-trip signature is evidence only for the bounded canonical properties and supplied sample. It is not proof of standard conformance, metadata preservation, codec quality, accessibility, or losslessness for other files, implementations, settings, or future tool versions.