Is Ruffle - Flash Emulator safe?

Ruffle - Flash Emulator runs Flash content locally via WebAssembly and does not send browsing data to external servers.

The extension injects a content script on most pages to detect and replace legacy Flash embeds with its own WebAssembly-based player, allowing sites that still use Flash to function. All Flash execution happens locally; no URLs visited or page content are transmitted externally. A low-severity implementation issue allows page scripts on the same page to observe the internal postMessage session ID and redirect the Flash player to a URL of their choosing.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.