# Security Policy for IMTLazarusv3 (Chrome Extension)

## Supported Versions

| Version | Supported          |
| ------- | ------------------ |
| 25.x    | :white_check_mark: |
| < 25.0  | :x:                |

## Reporting a Vulnerability

Please **do not** open a public GitHub issue for security-related matters.

To report a vulnerability:

1. Use the **Security** tab on the [IMTLazarusv3 repository](https://github.com/IMTLazarus/IMTLazarusv3/security) to create a private advisory.
2. Alternatively, send an email to the repository maintainer directly.

You can expect:

- An acknowledgment within **72 hours**.
- A detailed response with next steps within **5 business days**.
- If the vulnerability is accepted, a fix timeline will be communicated.

## Scope

This policy covers:

- The Chrome extension source code and manifest.
- Content scripts, background service workers, and sandbox pages.
- Dependencies listed in `manifest.json` and bundled JS files.

## Best Practices

- Always keep the extension updated to the latest version.
- Review permissions requested by the extension before installation.
- Report suspicious behavior through the official channels listed above.