Arisa Session Bridge Chrome extension security report

Arisa Session Bridge lets you explicitly send the cookies applicable to the active site to an Arisa instance you control. Use it in a dedicated Chrome or Brave profile named Arisa. Connect the profile once with a temporary, single-use setup link. After that, open a logged-in site, select the extension, and choose Send current session. The extension: - acts only after you open its popup and choose an action - uses active-tab access for the selected site - requests temporary host access to the active site only when sending, then removes it - retains persistent host access only for your configured Arisa bridge endpoint - encrypts session payloads with AES-256-GCM - never displays or returns cookie values through Arisa tool output - supports local and server-side device revocation - does not bypass login, CAPTCHA, verification, approval, or anti-bot controls A separate browser profile is strongly recommended because a shared session grants Arisa the same access as that browser session. Whenever possible, connect dedicated, non-personal accounts created for Arisa and grant them only the access Arisa needs. This limits the data and permissions exposed by a shared session.