Bugzilla++ Edge extension security report

Bugzilla++ is a browser extension that modernizes the Bugzilla bug-tracker interface. It works entirely client-side, so no server changes are required. Compatible with any Bugzilla instance (self-hosted, corporate, open-source projects). ▸ AI translation and bug summary One-click translation of Chinese, Korean, German, and French comments to English. Generates a structured bug summary with confidence scores. Supports offline Browser AI, corporate AI, and OpenRouter. All AI features are off by default and must be enabled manually. ▸ Dark mode Applies instantly at page load with zero flash of white. Follows your OS preference automatically, or set it manually from the toolbar popup. Covers every Bugzilla page including calendars, dropdowns, and search forms. ▸ Inline attachment previews Preview documents, spreadsheets, images, archives, and many other file types directly on the bug page. No download required. Browse inside compressed archives. Edit filenames before upload. ▸ Searchable dropdowns Every dropdown on the page becomes a searchable combobox. Type to filter hundreds of products, components, or keywords instantly. Multi-select fields show tag pills. Powered by Slim Select. ▸ Markdown comment editor Write formatted comments with bold, italic, code blocks, tables, lists, and blockquotes using a built-in rich-text editor. Drafts auto-save across sessions. Paste images directly from clipboard. ▸ Employee business cards Hover any commenter, assignee, or email address to see their name, photo, department, and contact info from the corporate directory. Works with Exchange/EWS-compatible directories. ▸ Gravatar avatar fallback (optional) On open-source Bugzillas where there is no corporate directory, the extension can show Gravatar photos as commenter avatars. Off by default. Enable the toggle in the options page. Only the SHA-256 hash of the email is sent. Plaintext email never leaves your browser. ▸ Confidential indicator Private comments display a diagonal CONFIDENTIAL watermark and red rail. When you tick "Make comment confidential" the same indicator appears on your draft, so you always know what is about to be sent. ▸ Color-coded timestamps and heatmap Relative age badges ("2d ago", "3mo ago") appear beside every date. An optional continuous-gradient heatmap colors them from ice blue (fresh) through orange to deep indigo (ancient). ▸ Per-user comment colors Each participant gets a unique, consistent color so you can follow who said what in long threads. ▸ Bug-list enhancements Click any column header to sort. Sticky headers, column resizing, column hiding, and zebra striping. ▸ Recent bugs and searches Toolbar dropdowns for recently visited bugs and recently run queries, with comment counts, attachment counts, status, assignee, and dates. ▸ Search page improvements Query.cgi gets searchable dropdowns on all fields, hidden asterisks for cleaner layout, date-range badges ("last 45 days"), and field help links preserved. ▸ Progress indicator A thin progress bar at the top of the page shows every step, from loading settings to translating comments, so you always know what the extension is doing. ▸ Other improvements • Duplicate-attachment detection with SHA-256 byte-match warning • Compact attachment grid with type badges, file sizes, and uploader avatars • Collapsible metadata fields • Sticky bug-title bar with comment/attachment counts, status, assignee • Login autocomplete for username and password fields • Accent color picker to customize per Bugzilla instance • Available in 10 languages • Works 100% offline, with all libraries bundled locally for air-gapped and on-premises installations ▸ Privacy 100% local processing. Attachments and employee-lookup calls stay within your company's own network. AI translation and Gravatar avatars are opt-in. All libraries are bundled inside the extension. No external CDNs, fonts, or analytics.