Is Roll20: Grimório do Tormenta20 safe?
The extension accepts forged page messages that can add HTML to its Roll20 book and chat UI.
On Roll20 editor pages, the extension injects a page script that listens for t20-data messages and uses the supplied book data to build its book browser and chat enhancements. It does not check the message origin or source before rendering book names, descriptions, and table cells with innerHTML, so forged book data can be inserted into the extension-created Roll20 UI.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itpyanderson - no other listings under this identity
pyanderson - no other listings under this identity
What this publisher told the store about itself, and the other listings that told it the same thing.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.