attachment_recover

github.com/YeJiangnan1029/attachment-recover

Public grade · v0.1.0BUse with care

A+ABBC

To reach A

A zotero:// link (a web page can open one) can make it install add-ons without asking youcontent/scripts/attachment_recover.js · line 129Services.io.getProtocolHandler("zotero").wrappedJSObject._extensions["zotero://plugin"] = pluginBridgeExtension;Reply

A zotero:// link can make it run code if you approve a promptcontent/scripts/attachment_recover.js · line 85Services.io.getProtocolHandler("zotero").wrappedJSObject._extensions["zotero://ztoolkit-debug"] = debugBridgeExtension;Reply

Updates are set to come from an address someone else could controlReply

✓Its code only names services we could identify

Then A+

Pass the live test in Zotero 10We install it in a fresh Zotero and record what it does. Every plugin at A is tested.

README badge

[![Plugins Atlas grade](https://zoteroplugins.org/badge/attachment-recover.svg)](https://zoteroplugins.org/p/attachment-recover)

Updates itself when the grade changes.

Disagree with a finding?Respond on GitHub from an account that maintains the repository. Your response is published next to the card, with our reply.Respond to the card

See the public plugin page