Please do not disclose security issues in a public issue.
Use GitHub's private vulnerability reporting feature for this repository. Include reproduction steps, affected browser/version and the public repository/release that triggered the problem.
GitHub Download Now supports public repositories only. It does not request cookie, browsing-history, download-history or GitHub-token permissions. All download and navigation URLs are validated against the expected GitHub origin and repository before use.
Supported security updates are provided for the latest published extension version.