DBMS Virtual Lab Edge extension security report

DBMS Virtual Lab is a complete SQL and PL/SQL learning environment for Database Management System coursework, built for students and teachers. For students: - A guided set of SQL lab experiments, each with step-by-step instructions, hints, and example solutions - A full SQL editor with syntax highlighting, running entirely in-browser - Automatic handling of SQL operations SQLite doesn't support natively — such as ALTER TABLE MODIFY COLUMN and CREATE VIEW ... WITH CHECK OPTION — with clear explanations of what the statement would actually do in MySQL, PostgreSQL, or Oracle - A PL/SQL simulator supporting DECLARE blocks, variables, IF/ELSE, FOR loops, and DBMS_OUTPUT.PUT_LINE - Progress saved automatically per step, with a final submission flow - Downloadable PDF reports of completed experiments For teachers: - Create and manage class batches with invite codes - Unlock/lock individual experiments and example solutions per batch - Review and grade student submissions with feedback - Reset a student's password directly if they're locked out - Export a batch's full progress and grades as a formatted Excel report - Delete a batch (with an export-first warning) without affecting other batches The extension opens as a side panel for quick sign-in, and launches the full lab workspace in a new tab. All SQL execution happens locally in the browser using SQLite (via WebAssembly) — no student code is executed on a remote server. The extension communicates only with its own backend API to handle accounts, save progress, and manage grades.