A zotero:// link (a web page can open one) can make it install add-ons without asking youcontent/scripts/zotero-lit-synapse.js · line 52727Services.io.getProtocolHandler("zotero").wrappedJSObject._extensions["zotero://plugin"] = pluginBridgeExtension;Reply
A zotero:// link can make it run code if you approve a promptcontent/scripts/zotero-lit-synapse.js · line 52683Services.io.getProtocolHandler("zotero").wrappedJSObject._extensions["zotero://ztoolkit-debug"] = debugBridgeExtension;Reply
Runs a local server; a setting (off by default) opens it to your networkcontent/scripts/zotero-lit-synapse.js · line 60145this.serverSocket = Cc["@mozilla.org/network/server-socket;1"].createInstance(Ci.nsIServerSocket);Reply
Launches programs on your computercontent/scripts/zotero-lit-synapse.js · line 9057"resource://gre/modules/Subprocess.sys.mjs"Reply
Runs a compiled program it ships, which we can't readcontent/scripts/zotero-lit-synapse.js · line 8945const executable = PathUtils.join(directory, "vector-gpu.exe");Reply
✓Readable code; not yet checked against the published source
✓Only contacts services we could identify
Then A+
Pass the live test in Zotero 10We install it in a fresh Zotero and record what it does. Every plugin at A is tested.
README badge[](https://zoteroplugins.org/p/zotero-lit-synapse-gpu)Updates itself when the grade changes.
Disagree with a finding?Respond on GitHub from an account that maintains the repository. Your response is published next to the card, with our reply.Respond to the card