From 7ec058f1eaec409764ba8a756cbee3c4b1bdcaff Mon Sep 17 00:00:00 2001 From: Claude Date: Sat, 28 Mar 2026 14:32:57 +0000 Subject: [PATCH 1/7] =?UTF-8?q?feat:=20custom=20secret=20patterns=20+=20re?= =?UTF-8?q?name=20Secret=20Scanner=20=E2=86=92=20Auto=20Redact?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Users can now define custom regex patterns for proprietary token formats, internal URLs with keys, or any secret the built-in scanner doesn't cover. Patterns are added/toggled/removed from the Options page and apply to both the live interception (content.js) and the Test tab (popup.js). Renamed all user-facing "Secret scanning" labels to "Auto Redact" across popup and options. Internal variable names (secretScanning, SecretScanner) kept for backwards compatibility with stored settings. https://claude.ai/code/session_01KF4i7Ra7zCEDskxDBaNtcT --- src/content/content.js | 19 ++++++-- src/lib/auto-detect.js | 2 +- src/lib/org-policy.js | 4 +- src/lib/secret-scanner.js | 43 +++++++++++++++--- src/lib/storage.js | 1 + src/options/options.html | 31 ++++++++++--- src/options/options.js | 91 +++++++++++++++++++++++++++++++++++++++ src/popup/popup.html | 4 +- src/popup/popup.js | 2 +- 9 files changed, 175 insertions(+), 22 deletions(-) diff --git a/src/content/content.js b/src/content/content.js index 47fd4e5..b843d72 100644 --- a/src/content/content.js +++ b/src/content/content.js @@ -301,7 +301,7 @@ const explicit = substitute(smart.text, mappings); allReplacements.push(...explicit.replacements); - // 3. Secret scanner (API keys, tokens, SSNs, credit cards, etc.) + // 3. Auto Redact (API keys, tokens, SSNs, credit cards, custom patterns, etc.) let finalText = explicit.text; if (settings.secretScanning !== false) { const secrets = scanAndRedactSecrets(finalText); @@ -665,8 +665,9 @@ } // ============================================================ - // Secret Scanner (inline for page world) - // Detects API keys, tokens, passwords, SSNs, credit cards, etc. + // Auto Redact — Secret Scanner (inline for page world) + // Detects API keys, tokens, passwords, SSNs, credit cards, + // plus user-defined custom patterns from settings. // ============================================================ const SECRET_PATTERNS = [ // OpenAI @@ -710,7 +711,17 @@ const redactions = []; let result = text; - for (const pat of SECRET_PATTERNS) { + // Combine built-in + custom patterns + const allPatterns = [...SECRET_PATTERNS]; + const custom = settings.customSecretPatterns || []; + for (const cp of custom) { + if (!cp.enabled || !cp.pattern) continue; + try { + allPatterns.push({ name: cp.name, re: new RegExp(cp.pattern, 'g'), to: cp.redact }); + } catch { /* invalid regex — skip */ } + } + + for (const pat of allPatterns) { pat.re.lastIndex = 0; const matches = []; let m; diff --git a/src/lib/auto-detect.js b/src/lib/auto-detect.js index bea7464..f06f336 100644 --- a/src/lib/auto-detect.js +++ b/src/lib/auto-detect.js @@ -2,7 +2,7 @@ * Silent Send - Auto-Detect * * Scans text for potential PPI that the user hasn't configured. - * This catches things the identity and secret scanner can't — + * This catches things the identity and auto-redact scanner can't — * because the user forgot or didn't know to configure them. * * Returns warnings (not auto-redactions) so the user can decide. diff --git a/src/lib/org-policy.js b/src/lib/org-policy.js index a4efa70..4e53470 100644 --- a/src/lib/org-policy.js +++ b/src/lib/org-policy.js @@ -198,9 +198,9 @@ const OrgPolicy = { }, /** - * Get org-required secret scanner patterns. + * Get org-required auto-redact patterns. * - * @returns {Array} additional patterns to add to the secret scanner + * @returns {Array} additional patterns to add to auto-redact */ async getOrgSecretPatterns() { const policy = await this.getPolicy(); diff --git a/src/lib/secret-scanner.js b/src/lib/secret-scanner.js index 89758f0..4679d08 100644 --- a/src/lib/secret-scanner.js +++ b/src/lib/secret-scanner.js @@ -1,11 +1,13 @@ /** - * Silent Send - Secret Scanner + * Silent Send - Auto Redact (Secret Scanner) * * Detects common secret/credential patterns in text and either * warns or auto-redacts them. This catches things the identity-based * smart patterns can't: API keys, tokens, passwords, SSNs, credit * cards, private keys, connection strings, etc. * + * Supports user-defined custom patterns for proprietary token formats. + * * Each pattern has: * - name: human-readable label * - regex: detection pattern @@ -163,12 +165,37 @@ const SECRET_PATTERNS = [ const SecretScanner = { /** - * Scan text for secrets. Returns list of findings. + * Build the full pattern list (built-in + custom). + * Custom patterns come from settings.customSecretPatterns. */ - scan(text) { - const findings = []; + _buildPatterns(customPatterns) { + const all = [...SECRET_PATTERNS]; + if (Array.isArray(customPatterns)) { + for (const cp of customPatterns) { + if (!cp.enabled || !cp.pattern) continue; + try { + all.push({ + name: cp.name || 'Custom Pattern', + regex: new RegExp(cp.pattern, 'g'), + redact: cp.redact || '[REDACTED-CUSTOM]', + severity: 'critical', + }); + } catch { /* invalid regex — skip */ } + } + } + return all; + }, - for (const pattern of SECRET_PATTERNS) { + /** + * Scan text for secrets. Returns list of findings. + * @param {string} text + * @param {Array} [customPatterns] — from settings.customSecretPatterns + */ + scan(text, customPatterns) { + const findings = []; + const patterns = this._buildPatterns(customPatterns); + + for (const pattern of patterns) { // Reset regex lastIndex pattern.regex.lastIndex = 0; let match; @@ -204,9 +231,11 @@ const SecretScanner = { /** * Redact all critical secrets in text. Warnings are not auto-redacted. * Returns { text, redactions[] } + * @param {string} text + * @param {Array} [customPatterns] — from settings.customSecretPatterns */ - redact(text) { - const findings = this.scan(text); + redact(text, customPatterns) { + const findings = this.scan(text, customPatterns); const redactions = []; let result = text; diff --git a/src/lib/storage.js b/src/lib/storage.js index 61d11c3..dea8bfa 100644 --- a/src/lib/storage.js +++ b/src/lib/storage.js @@ -40,6 +40,7 @@ const DEFAULT_SETTINGS = { autoAddDetected: true, maxLogEntries: 100, customDomains: [], + customSecretPatterns: [], categories: ['name', 'email', 'phone', 'address', 'ssn', 'dob', 'domain', 'password', 'general'], browserSync: false, }; diff --git a/src/options/options.html b/src/options/options.html index 147f151..504f2e4 100644 --- a/src/options/options.html +++ b/src/options/options.html @@ -49,17 +49,38 @@
- -

Auto-detect and redact API keys, tokens, passwords, SSNs, credit card numbers

+ +

Automatically detect and redact API keys, tokens, passwords, SSNs, credit card numbers, and custom patterns

+ + +
+

Custom Secret Patterns

+

+ Define your own patterns to catch proprietary tokens, internal URLs with keys, or any format the built-in scanner doesn't cover. +

+
+
+
+ + +
+
+ + +
+
+

+ Tip: For a URL like https://dns.example.com/abc123, use a pattern like dns\.example\.com/[A-Za-z0-9;]+ to match the secret path segment. +

+
+
-
-

Warn when potential personal data (IPs, addresses, paths) is detected that you haven't configured

diff --git a/src/popup/popup.js b/src/popup/popup.js index 1f9303e..f22223c 100644 --- a/src/popup/popup.js +++ b/src/popup/popup.js @@ -1,6 +1,6 @@ import SubstitutionEngine from '../lib/substitution-engine.js'; import SmartPatterns from '../lib/smart-patterns.js'; -import SecretScanner from '../lib/secret-scanner.js'; +import AutoRedact from '../lib/auto-redact.js'; import AutoDetect from '../lib/auto-detect.js'; import Storage from '../lib/storage.js'; import SilentSendSync from '../lib/sync.js'; @@ -220,7 +220,7 @@ async function initUnlockedUI() { }); // Load options tab settings - $('#optSecretScanning').checked = settings.secretScanning !== false; + $('#optAutoRedact').checked = settings.autoRedact !== false; $('#optAutoDetect').checked = settings.autoDetect !== false; $('#optAutoRedact').checked = settings.autoRedactDetected !== false; $('#optHighlights').checked = settings.showHighlights || false; @@ -228,7 +228,7 @@ async function initUnlockedUI() { // Options tab change handlers const optHandlers = [ - ['optSecretScanning', 'secretScanning'], + ['optAutoRedact', 'autoRedact'], ['optAutoDetect', 'autoDetect'], ['optAutoRedact', 'autoRedactDetected'], ['optHighlights', 'showHighlights'], @@ -713,16 +713,16 @@ function renderTestDiff() { const smartResult = SmartPatterns.substitute(input, identity); const explicitResult = SubstitutionEngine.substitute(smartResult.text, mappings); - const secretResult = SecretScanner.redact(explicitResult.text, settings.customSecretPatterns); + const redactResult = AutoRedact.redact(explicitResult.text, settings.customRedactPatterns); const allReplacements = [ ...smartResult.replacements, ...explicitResult.replacements, - ...secretResult.redactions, + ...redactResult.redactions, ]; - const finalText = secretResult.text; + const finalText = redactResult.text; - if (finalText === input && secretResult.warnings.length === 0) { + if (finalText === input && redactResult.warnings.length === 0) { output.textContent = input; stats.textContent = 'No substitutions detected'; return; @@ -738,8 +738,8 @@ function renderTestDiff() { `${escapedReplaced}` ); } - // Highlight secret redactions in red - for (const r of secretResult.redactions) { + // Highlight auto-redactions in red + for (const r of redactResult.redactions) { const escapedReplaced = escapeHtml(r.replaced); html = html.replace( escapedReplaced, @@ -750,12 +750,12 @@ function renderTestDiff() { const smartCount = smartResult.replacements.length; const explicitCount = explicitResult.replacements.length; - const secretCount = secretResult.redactions.length; - const warnCount = secretResult.warnings.length; + const redactCount = redactResult.redactions.length; + const warnCount = redactResult.warnings.length; const parts = []; if (smartCount > 0) parts.push(`${smartCount} smart`); if (explicitCount > 0) parts.push(`${explicitCount} explicit`); - if (secretCount > 0) parts.push(`${secretCount} secrets redacted`); + if (redactCount > 0) parts.push(`${redactCount} auto-redacted`); if (warnCount > 0) parts.push(`${warnCount} warnings`); // Auto-detect unconfigured PPI in the final text From 4b478c71bd9f811169e74f55564cf6d12b2e6108 Mon Sep 17 00:00:00 2001 From: Claude Date: Sat, 28 Mar 2026 15:17:20 +0000 Subject: [PATCH 3/7] chore: set version to 0.9.0 for pre-release testing https://claude.ai/code/session_01KF4i7Ra7zCEDskxDBaNtcT --- manifest.firefox.json | 2 +- manifest.json | 2 +- package.json | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/manifest.firefox.json b/manifest.firefox.json index 8a3c131..24da4cd 100644 --- a/manifest.firefox.json +++ b/manifest.firefox.json @@ -1,7 +1,7 @@ { "manifest_version": 3, "name": "Silent Send", - "version": "2.0.5", + "version": "0.9.0", "description": "Intercepts personal info and substitutes it with user-defined replacements before sending to AI services.", "browser_specific_settings": { "gecko": { diff --git a/manifest.json b/manifest.json index 176ce87..efbf558 100644 --- a/manifest.json +++ b/manifest.json @@ -1,7 +1,7 @@ { "manifest_version": 3, "name": "Silent Send", - "version": "2.0.5", + "version": "0.9.0", "description": "Intercepts personal info and substitutes it with user-defined replacements before sending to AI services.", "permissions": [ "storage", diff --git a/package.json b/package.json index e33f7f7..97a2290 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "silent-send", - "version": "2.0.5", + "version": "0.9.0", "private": true, "license": "BSL-1.1", "description": "Browser extension that substitutes personal data before sending to AI services", From f237139e80df17f7b6c86e6bd208c695b37e5754 Mon Sep 17 00:00:00 2001 From: Claude Date: Sat, 28 Mar 2026 15:30:45 +0000 Subject: [PATCH 4/7] legal: strengthen disclaimer, liability, and warranty language MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - LICENSE: expanded warranty disclaimer covering silent failures from third-party changes, coverage gaps, regulatory non-compliance, and commercial licensee expectations. Explicit limitation of liability for privacy breaches, identity theft, and regulatory penalties. - PRIVACY.md: added limitations section covering third-party changes, coverage gaps, user responsibility, and compliance disclaimer. - README.md: detailed disclaimer with specific scenarios — site API changes, coverage gaps, user verification responsibility, and commercial license scope. - Popup: expanded footer warning about third-party changes and user responsibility. - Options page: added footer disclaimer with LICENSE link, updated version to 0.9.0. https://claude.ai/code/session_01KF4i7Ra7zCEDskxDBaNtcT --- LICENSE | 61 +++++++++++++++++++++++++++++++++++----- PRIVACY.md | 11 ++++++++ README.md | 14 ++++++++- src/options/options.html | 5 +++- src/popup/popup.html | 10 +++++-- 5 files changed, 89 insertions(+), 12 deletions(-) diff --git a/LICENSE b/LICENSE index d546866..6fd804f 100644 --- a/LICENSE +++ b/LICENSE @@ -29,10 +29,57 @@ refrain from using the Licensed Work. All copies of the original and modified Licensed Work, and derivative works of the Licensed Work, are subject to this License. -THE LICENSED WORK IS PROVIDED "AS IS". THE LICENSOR HEREBY DISCLAIMS -ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE -WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND -NONINFRINGEMENT. IN NO EVENT SHALL THE LICENSOR BE LIABLE FOR ANY -CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, -TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE -LICENSED WORK OR THE USE OR OTHER DEALINGS IN THE LICENSED WORK. +DISCLAIMER OF WARRANTY + +THE LICENSED WORK IS PROVIDED "AS IS" AND "AS AVAILABLE", WITHOUT +WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED +TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR +PURPOSE, NONINFRINGEMENT, ACCURACY, COMPLETENESS, OR RELIABILITY. + +THE LICENSOR DOES NOT WARRANT THAT THE LICENSED WORK WILL: +(A) DETECT, INTERCEPT, OR SUBSTITUTE ALL PERSONAL INFORMATION, + SECRETS, CREDENTIALS, OR SENSITIVE DATA IN ALL CIRCUMSTANCES; +(B) FUNCTION CORRECTLY ON ALL WEBSITES, SERVICES, OR PLATFORMS, + INCLUDING AFTER THIRD-PARTY CHANGES TO THEIR INTERFACES, + APIs, OR DATA FORMATS; +(C) BE FREE OF ERRORS, BUGS, INTERRUPTIONS, OR SECURITY + VULNERABILITIES; +(D) MEET ANY SPECIFIC PRIVACY, SECURITY, OR REGULATORY + REQUIREMENTS, INCLUDING BUT NOT LIMITED TO GDPR, HIPAA, + CCPA, PCI-DSS, OR ANY OTHER DATA PROTECTION FRAMEWORK. + +LIMITATION OF LIABILITY + +IN NO EVENT SHALL THE LICENSOR, CONTRIBUTORS, OR DISTRIBUTORS BE +LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, +CONSEQUENTIAL, OR PUNITIVE DAMAGES (INCLUDING BUT NOT LIMITED TO +LOSS OF DATA, LOSS OF PRIVACY, IDENTITY THEFT, UNAUTHORIZED +DISCLOSURE OF PERSONAL INFORMATION, REGULATORY FINES OR PENALTIES, +REPUTATIONAL HARM, LOSS OF BUSINESS, OR PROCUREMENT OF SUBSTITUTE +SERVICES) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN +CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR +OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF OR INABILITY TO USE +THE LICENSED WORK, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH +DAMAGES. + +THIS LIMITATION APPLIES REGARDLESS OF WHETHER THE FAILURE RESULTS +FROM: (A) THIRD-PARTY CHANGES TO WEBSITES, APIs, OR SERVICES THAT +CAUSE THE LICENSED WORK TO MALFUNCTION OR FAIL SILENTLY; (B) USER +MISCONFIGURATION OR FAILURE TO VERIFY SUBSTITUTIONS; (C) PATTERNS, +FORMATS, OR DATA TYPES NOT RECOGNIZED BY THE LICENSED WORK; OR +(D) ANY OTHER CAUSE BEYOND THE LICENSOR'S REASONABLE CONTROL. + +COMMERCIAL LICENSEES ACKNOWLEDGE THAT COMMERCIAL LICENSE FEES ARE +NOT INSURANCE PREMIUMS AND DO NOT CREATE ANY ADDITIONAL WARRANTY, +INDEMNIFICATION, OR LIABILITY OBLIGATION BEYOND WHAT IS STATED IN +THE APPLICABLE COMMERCIAL LICENSE AGREEMENT. THE LIMITATIONS AND +DISCLAIMERS IN THIS SECTION APPLY TO ALL USERS, INCLUDING +COMMERCIAL LICENSEES, UNLESS EXPLICITLY SUPERSEDED IN WRITING BY +A SEPARATE COMMERCIAL LICENSE AGREEMENT. + +THE LICENSED WORK IS A CONVENIENCE TOOL THAT REDUCES — BUT CANNOT +ELIMINATE — THE RISK OF INADVERTENT DISCLOSURE OF PERSONAL +INFORMATION. USERS ARE SOLELY RESPONSIBLE FOR VERIFYING THAT +SENSITIVE DATA HAS BEEN PROPERLY SUBSTITUTED BEFORE TRANSMISSION +AND FOR IMPLEMENTING ADDITIONAL SAFEGUARDS APPROPRIATE TO THEIR +USE CASE. diff --git a/PRIVACY.md b/PRIVACY.md index c0c6e9f..a23111e 100644 --- a/PRIVACY.md +++ b/PRIVACY.md @@ -62,6 +62,17 @@ If this privacy policy changes, the updated version will be posted at this URL a For questions about this privacy policy, open an issue at: https://github.com/outis1one/silent-send/issues +## Limitations and disclaimer + +Silent Send is a convenience tool that reduces the risk of sharing personal information with third-party services. It does not guarantee complete protection. Specifically: + +- **Third-party changes:** Websites may change their APIs, interfaces, or data submission methods at any time. Such changes can cause Silent Send to stop intercepting or substituting data without any visible error. Silent Send contributors have no control over third-party websites and accept no responsibility for changes they make. +- **Coverage gaps:** Silent Send may not detect personal information in images, unusual text formats, non-standard encodings, dynamically generated content, or patterns not covered by built-in or custom rules. +- **User responsibility:** You are responsible for verifying that substitutions are applied correctly before transmitting sensitive data. The extension provides a Test tab for this purpose. +- **Not a compliance tool:** Silent Send does not guarantee compliance with any privacy regulation (GDPR, HIPAA, CCPA, PCI-DSS, or otherwise). Organizations requiring regulatory compliance should implement appropriate professional tooling and processes. + +For the full limitation of liability, see the [LICENSE](LICENSE) file. + ## Open source Silent Send's source code is publicly available at https://github.com/outis1one/silent-send — you can verify every claim in this policy by reading the code. diff --git a/README.md b/README.md index c87deb2..cd152a2 100644 --- a/README.md +++ b/README.md @@ -542,7 +542,19 @@ Silent Send works well for text you type and most document uploads, but some thi ## Disclaimer -Silent Send is provided "as is" without warranty of any kind. It is a convenience tool that reduces the chance of accidentally sharing personal information with AI services. It is not a security guarantee and should not be your only privacy protection. The source code is available for inspection — you don't have to take our word for it. +Silent Send is provided "as is" and "as available" without warranty of any kind, express or implied. It is a **convenience tool** that reduces — but cannot eliminate — the risk of accidentally sharing personal information with AI services. It is **not a security guarantee** and should not be your only privacy protection. + +**What this means in practice:** + +- Silent Send may fail to detect or substitute personal information in certain formats, edge cases, images, or data you haven't configured. +- Third-party websites (ChatGPT, Claude, Gemini, Reddit, GitHub, etc.) may change their interfaces, APIs, or data submission methods at any time. Such changes can cause Silent Send to stop intercepting data **without any visible error or warning**. The Silent Send contributors have no control over and accept no responsibility for third-party changes. +- **You are solely responsible** for verifying that your personal data has been properly substituted before sending. The Test tab in the popup is provided for this purpose. +- Silent Send is not a substitute for professional data protection, legal compliance, or security tooling. It does not guarantee compliance with any regulation (GDPR, HIPAA, CCPA, PCI-DSS, or otherwise). +- No contributor, maintainer, or distributor of Silent Send shall be liable for any damages arising from its use, including but not limited to privacy breaches, identity theft, data exposure, or regulatory penalties — whether caused by software bugs, third-party changes, misconfiguration, or any other reason. + +Commercial licensees: a commercial license grants the right to use Silent Send in a commercial context. It does not create additional warranties, indemnification, or liability obligations beyond those stated in the license agreement. + +The source code is available for inspection — you don't have to take our word for it. ## License diff --git a/src/options/options.html b/src/options/options.html index c306c66..a925ca3 100644 --- a/src/options/options.html +++ b/src/options/options.html @@ -629,7 +629,10 @@
-

Silent Send v2.0.5

+

Silent Send v0.9.0

+

+ Silent Send is a convenience tool, not a security guarantee. Third-party sites may change how they send data at any time, which can cause missed substitutions without warning. You are responsible for verifying your data before sending. See the LICENSE for full terms. +

diff --git a/src/popup/popup.html b/src/popup/popup.html index deeaae6..7deb185 100644 --- a/src/popup/popup.html +++ b/src/popup/popup.html @@ -263,9 +263,13 @@ AES-256 encrypted at rest — unreadable without your password.
- Silent Send is a convenience tool, not a security guarantee. It can miss - PPI in images, file uploads, unusual name forms, or data you forgot to - configure. Always verify sensitive messages before sending. + Silent Send is a convenience tool, not a security guarantee. It reduces + but cannot eliminate the risk of sharing personal data. It may miss PPI + in images, unusual formats, or data you haven't configured. Third-party + sites may change how they send data at any time, which can cause missed + substitutions without warning. Always verify sensitive messages before + sending. By using this extension, you accept full responsibility for + verifying your data is protected.
Options From 22205c2590a80cc3ff24d74c04e7abdcdf238558 Mon Sep 17 00:00:00 2001 From: Claude Date: Sat, 28 Mar 2026 15:59:20 +0000 Subject: [PATCH 5/7] legal: remove commercial licensing, non-commercial use only MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Commercial use is no longer permitted under the license. The BSL-1.1 still converts to MIT on March 26, 2030. All disclaimer and liability language retained — applies to all users regardless. https://claude.ai/code/session_01KF4i7Ra7zCEDskxDBaNtcT --- LICENSE | 21 +++++---------------- README.md | 2 +- 2 files changed, 6 insertions(+), 17 deletions(-) diff --git a/LICENSE b/LICENSE index 6fd804f..2e1108f 100644 --- a/LICENSE +++ b/LICENSE @@ -12,20 +12,17 @@ derivative works, redistribute, and make non-production use of the Licensed Work. The Licensor hereby grants you the right to make production use of -the Licensed Work for personal, non-commercial purposes. +the Licensed Work for personal, non-commercial purposes only. -For commercial use, you must obtain a commercial license from the -Licensor. Contact: [your-email-here] +Commercial use of the Licensed Work is not permitted under this +license. This includes use by or on behalf of any organization, +business, or entity for revenue-generating purposes, internal +business operations, or as part of a commercial product or service. Effective on the Change Date, the Licensor hereby grants you rights under the terms of the Change License, and the rights granted above terminate. -If your use of the Licensed Work does not comply with the -requirements currently in effect as described in this License, you -must purchase a commercial license from the Licensor, or you must -refrain from using the Licensed Work. - All copies of the original and modified Licensed Work, and derivative works of the Licensed Work, are subject to this License. @@ -69,14 +66,6 @@ MISCONFIGURATION OR FAILURE TO VERIFY SUBSTITUTIONS; (C) PATTERNS, FORMATS, OR DATA TYPES NOT RECOGNIZED BY THE LICENSED WORK; OR (D) ANY OTHER CAUSE BEYOND THE LICENSOR'S REASONABLE CONTROL. -COMMERCIAL LICENSEES ACKNOWLEDGE THAT COMMERCIAL LICENSE FEES ARE -NOT INSURANCE PREMIUMS AND DO NOT CREATE ANY ADDITIONAL WARRANTY, -INDEMNIFICATION, OR LIABILITY OBLIGATION BEYOND WHAT IS STATED IN -THE APPLICABLE COMMERCIAL LICENSE AGREEMENT. THE LIMITATIONS AND -DISCLAIMERS IN THIS SECTION APPLY TO ALL USERS, INCLUDING -COMMERCIAL LICENSEES, UNLESS EXPLICITLY SUPERSEDED IN WRITING BY -A SEPARATE COMMERCIAL LICENSE AGREEMENT. - THE LICENSED WORK IS A CONVENIENCE TOOL THAT REDUCES — BUT CANNOT ELIMINATE — THE RISK OF INADVERTENT DISCLOSURE OF PERSONAL INFORMATION. USERS ARE SOLELY RESPONSIBLE FOR VERIFYING THAT diff --git a/README.md b/README.md index cd152a2..6f0db22 100644 --- a/README.md +++ b/README.md @@ -558,6 +558,6 @@ The source code is available for inspection — you don't have to take our word ## License -[Business Source License 1.1](LICENSE) — free for personal, non-commercial use. Commercial use requires a paid license. The code converts to MIT on March 26, 2030. +[Business Source License 1.1](LICENSE) — free for personal, non-commercial use only. Commercial use is not permitted. The code converts to MIT on March 26, 2030. Contributions welcome. If you find a bug, especially a privacy-related one, please [open an issue](https://github.com/outis1one/silent-send/issues). From ad3b8718faa09cba084b5d5a41c58b47d1f3bcaf Mon Sep 17 00:00:00 2001 From: Claude Date: Sat, 28 Mar 2026 16:21:21 +0000 Subject: [PATCH 6/7] =?UTF-8?q?fix:=20PPI=20=E2=86=92=20PII=20across=20ent?= =?UTF-8?q?ire=20codebase=20+=20add=20Ko-fi=20support=20section?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit PII (Personally Identifiable Information) is the correct standard term. Renamed all instances — comments, UI labels, variable names, function names (autoDetectPPI → autoDetectPII, scanInputForPPI → scanInputForPII, ppiWarnings → piiWarnings), CSS comments, README, and options page. Added Ko-fi donation section to README and Options footer. Tone: no obligation, no warranty, no influence on updates — just appreciation. https://claude.ai/code/session_01KF4i7Ra7zCEDskxDBaNtcT --- README.md | 29 ++++++++++++++++------- src/content/content.css | 4 ++-- src/content/content.js | 46 ++++++++++++++++++------------------- src/lib/auto-detect.js | 12 +++++----- src/lib/document-scanner.js | 10 ++++---- src/lib/org-policy.js | 4 ++-- src/lib/storage.js | 2 +- src/options/options.html | 12 ++++++---- src/popup/popup.html | 10 ++++---- src/popup/popup.js | 20 ++++++++-------- 10 files changed, 83 insertions(+), 66 deletions(-) diff --git a/README.md b/README.md index 6f0db22..42ed7c8 100644 --- a/README.md +++ b/README.md @@ -99,20 +99,20 @@ Go to **Options** → **Transfer Data** → **Import CSV / Password Export**. ### Document scanning -When you upload files to an AI service, Silent Send extracts and scans the text for PPI before the file is sent: +When you upload files to an AI service, Silent Send extracts and scans the text for PII before the file is sent: | Format | How it works | |---|---| -| PDF | Text extracted from content streams, PPI substituted, uploaded as clean plaintext | -| DOCX, XLSX, PPTX | XML text extracted from ZIP structure, PPI substituted, uploaded as plaintext | -| ODT, ODS, ODP | OpenDocument XML text extracted, PPI substituted | +| PDF | Text extracted from content streams, PII substituted, uploaded as clean plaintext | +| DOCX, XLSX, PPTX | XML text extracted from ZIP structure, PII substituted, uploaded as plaintext | +| ODT, ODS, ODP | OpenDocument XML text extracted, PII substituted | | DOC, XLS | Legacy binary format — readable text runs extracted | | RTF | Formatting stripped, text extracted | | TXT, CSV, JSON, code files | Direct string substitution | | Images (PNG, JPG, etc.) | Not scanned — no text to extract | | Scanned PDFs (image-only) | Not scanned — no text layer | -For PDF/DOCX/XLSX uploads, a preview panel shows what PPI was found before uploading. You can choose to substitute and upload, or upload the original. Text files are substituted silently. The original file on your disk is never modified — substitution only happens to the in-flight upload. +For PDF/DOCX/XLSX uploads, a preview panel shows what PII was found before uploading. You can choose to substitute and upload, or upload the original. Text files are substituted silently. The original file on your disk is never modified — substitution only happens to the in-flight upload. ## First-time setup @@ -390,7 +390,7 @@ src/ crypto.js — AES-256-GCM encryption, PBKDF2 key derivation, TOTP (RFC 6238), WebAuthn, key caching sync.js — Cross-browser sync with encryption (browser sync, Gist, folder, URL, sync codes) storage.js — Browser storage wrapper with transparent at-rest encryption - auto-detect.js — PPI pattern detection (IPs, addresses, paths, proper nouns) + auto-detect.js — PII pattern detection (IPs, addresses, paths, proper nouns) document-scanner.js — PDF/DOCX/XLSX/ODT/RTF text extraction and scanning import-parser.js — Bulk import from CSV, password managers, autofill exports version-history.js — Sync version snapshots + rollback @@ -427,7 +427,7 @@ For teams that want to enforce privacy rules across all members: 1. **Admin** creates a JSON policy file hosted at any URL (static file, S3, cloud function) 2. **Team members** join by entering the policy URL or an invite code in Options → Organization 3. **Org rules merge** with personal rules — required mappings are always active and cannot be disabled -4. **Compliance dashboard** shows which required fields are configured (without revealing actual PPI) +4. **Compliance dashboard** shows which required fields are configured (without revealing actual PII) 5. **Policy updates** are polled automatically (hourly) ### Org policy format @@ -479,7 +479,7 @@ When you enable **sync encryption** (Options → Sync Between Browsers → Sync | TOTP secret | Authenticator app shared secret | | All sync data | Everything sent to Gist, sync folders, custom URLs, browser sync | -**Only two things remain plaintext** — the encryption salt (needed to derive the key) and a verification blob (needed to check the password). Neither contains PPI. +**Only two things remain plaintext** — the encryption salt (needed to derive the key) and a verification blob (needed to check the password). Neither contains PII. Without at-rest encryption, data is stored in plaintext in the browser's local storage (similar to cookies and localStorage). Anyone with file system access to your browser profile directory could read it. @@ -561,3 +561,16 @@ The source code is available for inspection — you don't have to take our word [Business Source License 1.1](LICENSE) — free for personal, non-commercial use only. Commercial use is not permitted. The code converts to MIT on March 26, 2030. Contributions welcome. If you find a bug, especially a privacy-related one, please [open an issue](https://github.com/outis1one/silent-send/issues). + +## Support + +Silent Send is a weekend project — built because the developer wanted it and didn't look to see if something else already existed before building it with Claude. No donations needed. If you find it useful, great — enjoy. If it helps you keep your personally identifiable information private, that's thanks enough. More people having access to privacy is the goal. + +That said, Claude access isn't free. If you have a desire to give a coffee back, it would be appreciated — but don't feel any obligation to tip. + +**[Buy me a coffee on Ko-fi](https://ko-fi.com/YOUR_KOFI_USERNAME)** + +A few things to know: +- Donations do not influence updates. Silent Send may or may not get updates based on the developer's usage and available time. +- Donating does not create any warranty, support obligation, or expectation of future development. +- This is and always will be a free, non-commercial project. diff --git a/src/content/content.css b/src/content/content.css index 8f287d9..3eab79a 100644 --- a/src/content/content.css +++ b/src/content/content.css @@ -35,7 +35,7 @@ border-radius: 2px; } -/* Auto-detect PPI warning banner */ +/* Auto-detect PII warning banner */ .ss-autodetect-warning { position: fixed; top: 16px; @@ -136,7 +136,7 @@ font-style: italic; } -/* Pre-send PPI warning (spellcheck-style, appears while typing) */ +/* Pre-send PII warning (spellcheck-style, appears while typing) */ .ss-presend-warning { position: fixed; top: 16px; diff --git a/src/content/content.js b/src/content/content.js index 0d907e4..226b391 100644 --- a/src/content/content.js +++ b/src/content/content.js @@ -288,7 +288,7 @@ // ============================================================ // Combined substitution: smart patterns + explicit + auto-redact - // + auto-detect warning for unconfigured PPI + // + auto-detect warning for unconfigured PII // ============================================================ function substituteAll(text) { const allReplacements = []; @@ -309,12 +309,12 @@ finalText = redacted.text; } - // 4. Auto-detect: scan the FINAL text for unconfigured PPI + // 4. Auto-detect: scan the FINAL text for unconfigured PII // Auto-redact if enabled, otherwise just warn if (settings.autoDetect !== false) { - const warnings = autoDetectPPI(finalText, identity); + const warnings = autoDetectPII(finalText, identity); if (warnings.length > 0) { - // Auto-redact detected PPI in the outbound text + // Auto-redact detected PII in the outbound text if (settings.autoRedactDetected !== false) { for (let i = warnings.length - 1; i >= 0; i--) { const w = warnings[i]; @@ -343,9 +343,9 @@ } // ============================================================ - // Auto-Detect PPI Scanner (inline for page world) + // Auto-Detect PII Scanner (inline for page world) // ============================================================ - const PPI_PATTERNS = [ + const PII_PATTERNS = [ // Network { name: 'Private IP', re: /\b(?:10\.\d{1,3}\.\d{1,3}\.\d{1,3}|172\.(?:1[6-9]|2\d|3[01])\.\d{1,3}\.\d{1,3}|192\.168\.\d{1,3}\.\d{1,3})\b/g, hint: 'Private IP address', cat: 'network' }, @@ -574,7 +574,7 @@ }); } - function autoDetectPPI(text, ident) { + function autoDetectPII(text, ident) { if (!text || text.length < 5) return []; const hasContext = CONTEXT_WORDS_RE.test(text); @@ -590,7 +590,7 @@ } const findings = []; - for (const pat of PPI_PATTERNS) { + for (const pat of PII_PATTERNS) { if (pat.contextRequired && !hasContext) continue; pat.re.lastIndex = 0; let m; @@ -642,7 +642,7 @@ safeHTML(warningEl, `
- Silent Send detected potential PPI that may not be substituted: + Silent Send detected potential PII that may not be substituted:
${items} @@ -978,7 +978,7 @@ // ============================================================ // Document Upload Processing // - // Scans files in FormData uploads for PPI. Supports PDF, DOCX, + // Scans files in FormData uploads for PII. Supports PDF, DOCX, // XLSX, and text files. Shows preview for binary formats. // ============================================================ @@ -1050,8 +1050,8 @@ } /** - * Scan a document file for PPI. Strategy: extract text from any - * format, substitute PPI, upload as plaintext. The AI extracts text + * Scan a document file for PII. Strategy: extract text from any + * format, substitute PII, upload as plaintext. The AI extracts text * from files anyway — no need to preserve formatting in a file * the user never gets back. Original stays untouched on disk. * @@ -1308,7 +1308,7 @@ safeHTML(docPreviewEl, `
- PPI found in ${esc(filename)} + PII found in ${esc(filename)} ${preview.replacementCount} item(s)
${preview.note || ''}
@@ -1745,7 +1745,7 @@ } // ============================================================ - // Pre-Send PPI Detection — scans as you type/paste (spellcheck style) + // Pre-Send PII Detection — scans as you type/paste (spellcheck style) // ============================================================ // Generate obviously-fake values using reserved/standard ranges @@ -1810,7 +1810,7 @@ safeHTML(preSendWarningEl, `
- Potential PPI detected — not yet configured: + Potential PII detected — not yet configured:
${items} @@ -1851,12 +1851,12 @@ // Update local mappings so the fetch interceptor uses them immediately mappings = currentMappings; - // Replace the PPI value in the current input right now + // Replace the PII value in the current input right now if (inputEl) { replaceInInput(inputEl, real, fake); - // Re-scan — will dismiss warning if no more PPI remains + // Re-scan — will dismiss warning if no more PII remains if (inputScanTimer) clearTimeout(inputScanTimer); - inputScanTimer = setTimeout(() => scanInputForPPI(inputEl), 150); + inputScanTimer = setTimeout(() => scanInputForPII(inputEl), 150); } // Visual feedback @@ -1879,7 +1879,7 @@ // Re-scan to update warning if (inputEl) { if (inputScanTimer) clearTimeout(inputScanTimer); - inputScanTimer = setTimeout(() => scanInputForPPI(inputEl), 150); + inputScanTimer = setTimeout(() => scanInputForPII(inputEl), 150); } }); }); @@ -1930,14 +1930,14 @@ // Scan input on type and paste let inputScanTimer = null; - function scanInputForPPI(target) { + function scanInputForPII(target) { const text = target.textContent || target.value || ''; if (!text || text.length < 5) { if (preSendWarningEl) preSendWarningEl.classList.remove('visible'); return; } - const warnings = autoDetectPPI(text, identity); + const warnings = autoDetectPII(text, identity); if (warnings.length > 0) { showPreSendWarning(warnings, target); } else if (preSendWarningEl) { @@ -1951,7 +1951,7 @@ if (target.matches?.('[contenteditable], textarea, input[type="text"]')) { // Debounce — don't scan on every keystroke if (inputScanTimer) clearTimeout(inputScanTimer); - inputScanTimer = setTimeout(() => scanInputForPPI(target), 800); + inputScanTimer = setTimeout(() => scanInputForPII(target), 800); } }, true); @@ -1961,7 +1961,7 @@ if (target.matches?.('[contenteditable], textarea, input[type="text"]') || target.closest?.('[contenteditable]')) { // Scan shortly after paste completes - setTimeout(() => scanInputForPPI(target.closest?.('[contenteditable]') || target), 200); + setTimeout(() => scanInputForPII(target.closest?.('[contenteditable]') || target), 200); } }, true); diff --git a/src/lib/auto-detect.js b/src/lib/auto-detect.js index f06f336..a6309d2 100644 --- a/src/lib/auto-detect.js +++ b/src/lib/auto-detect.js @@ -1,14 +1,14 @@ /** * Silent Send - Auto-Detect * - * Scans text for potential PPI that the user hasn't configured. + * Scans text for potential PII that the user hasn't configured. * This catches things the identity and auto-redact scanner can't — * because the user forgot or didn't know to configure them. * * Returns warnings (not auto-redactions) so the user can decide. */ -const PPI_PATTERNS = [ +const PII_PATTERNS = [ // --- Network --- { name: 'Private IP Address', @@ -21,7 +21,7 @@ const PPI_PATTERNS = [ regex: /\b(?:(?:25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)\.){3}(?:25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)\b/g, category: 'network', hint: 'IP address — could identify your network', - // Exclude common non-PPI IPs + // Exclude common non-PII IPs exclude: /^(?:127\.0\.0\.1|0\.0\.0\.0|255\.255\.255\.\d+|8\.8\.[84]\.[84]|1\.1\.1\.1|1\.0\.0\.1)$/, }, { @@ -126,12 +126,12 @@ const PPI_PATTERNS = [ }, ]; -// Context words that make ambiguous patterns more likely to be PPI +// Context words that make ambiguous patterns more likely to be PII const CONTEXT_WORDS = /\b(?:born|birthday|dob|birth|passport|license|driver|ssn|social\s*security|address|home|live|lives|reside|zip|postal)\b/i; const AutoDetect = { /** - * Scan text for potential unconfigured PPI. + * Scan text for potential unconfigured PII. * Pass in identity so we can skip values the user already configured. * * Returns array of { name, value, hint, category, index } @@ -167,7 +167,7 @@ const AutoDetect = { } } - for (const pattern of PPI_PATTERNS) { + for (const pattern of PII_PATTERNS) { // Skip context-dependent patterns if no context words present if (pattern.contextRequired && !hasContext) continue; diff --git a/src/lib/document-scanner.js b/src/lib/document-scanner.js index 666a068..fa7aaee 100644 --- a/src/lib/document-scanner.js +++ b/src/lib/document-scanner.js @@ -1,11 +1,11 @@ /** * Silent Send - Document Scanner * - * Scans uploaded documents for PPI and substitutes/redacts before + * Scans uploaded documents for PII and substitutes/redacts before * the file reaches the AI service. * * Supported formats: - * - PDF: Extract text, scan for PPI, create sanitized plaintext version + * - PDF: Extract text, scan for PII, create sanitized plaintext version * (PDFs can't be reliably edited in-place without breaking layout) * - DOCX: Parse XML, find-replace text, repackage ZIP (layout preserved) * - XLSX: Parse cells, find-replace values, repackage (formatting preserved) @@ -13,7 +13,7 @@ * * Modes: * - Silent: substitute and upload (default for text files) - * - Preview: show PPI findings, let user confirm before upload (default for PDF/DOCX/XLSX) + * - Preview: show PII findings, let user confirm before upload (default for PDF/DOCX/XLSX) * * Integration: * - The fetch interceptor in content.js detects multipart/form-data uploads @@ -70,9 +70,9 @@ const DocumentScanner = { }, /** - * PDF: extract text, scan for PPI, create sanitized text file. + * PDF: extract text, scan for PII, create sanitized text file. * PDFs can't be reliably edited in-place, so we extract text, - * substitute PPI, and send the clean text instead. + * substitute PII, and send the clean text instead. */ async _processPDF(file, filename, substituteAll, options) { const text = await this._extractPDFText(file); diff --git a/src/lib/org-policy.js b/src/lib/org-policy.js index 8a6808f..ce50bea 100644 --- a/src/lib/org-policy.js +++ b/src/lib/org-policy.js @@ -12,7 +12,7 @@ * - Policy updates are applied automatically * * Privacy: the org admin can check compliance (are required fields - * configured?) but CANNOT see individual PPI values. + * configured?) but CANNOT see individual PII values. */ import api from './browser-polyfill.js'; @@ -220,7 +220,7 @@ const OrgPolicy = { /** * Check if the user's configuration meets org policy requirements. - * Returns compliance status WITHOUT revealing actual PPI values. + * Returns compliance status WITHOUT revealing actual PII values. * * @returns {{ compliant: boolean, missing: string[], configured: string[] }} */ diff --git a/src/lib/storage.js b/src/lib/storage.js index 3927ccc..4926a08 100644 --- a/src/lib/storage.js +++ b/src/lib/storage.js @@ -23,7 +23,7 @@ const KEYS = { SETTINGS: 'ss_settings', }; -// Keys that contain sensitive PPI and should be encrypted at rest +// Keys that contain sensitive PII and should be encrypted at rest // All user data keys are encrypted at rest — settings included since // custom domains and configuration can reveal what services the user // accesses. Only ss_sync_encryption (salt, verification blob) and diff --git a/src/options/options.html b/src/options/options.html index a925ca3..226bada 100644 --- a/src/options/options.html +++ b/src/options/options.html @@ -90,8 +90,8 @@
- -

Automatically replace detected PPI with generic placeholders (192.0.2.1, 123 Example Street, etc.) when sending

+ +

Automatically replace detected PII with generic placeholders (192.0.2.1, 123 Example Street, etc.) when sending

- -

Show a + button on detected PPI to instantly create a mapping with a suggested fake value

+ +

Show a + button on detected PII to instantly create a mapping with a suggested fake value

diff --git a/src/popup/popup.html b/src/popup/popup.html index 7deb185..c896408 100644 --- a/src/popup/popup.html +++ b/src/popup/popup.html @@ -206,7 +206,7 @@
- Auto-detect PPI + Auto-detect PII Warn about unconfigured personal data (IPs, addresses, paths)
@@ -214,8 +214,8 @@
- Auto-redact detected PPI - Replace detected PPI with placeholders on send + Auto-redact detected PII + Replace detected PII with placeholders on send
@@ -231,7 +231,7 @@
Document scan preview - Show PPI findings before uploading documents + Show PII findings before uploading documents
@@ -264,7 +264,7 @@
Silent Send is a convenience tool, not a security guarantee. It reduces - but cannot eliminate the risk of sharing personal data. It may miss PPI + but cannot eliminate the risk of sharing personal data. It may miss PII in images, unusual formats, or data you haven't configured. Third-party sites may change how they send data at any time, which can cause missed substitutions without warning. Always verify sensitive messages before diff --git a/src/popup/popup.js b/src/popup/popup.js index f22223c..b318f05 100644 --- a/src/popup/popup.js +++ b/src/popup/popup.js @@ -758,20 +758,20 @@ function renderTestDiff() { if (redactCount > 0) parts.push(`${redactCount} auto-redacted`); if (warnCount > 0) parts.push(`${warnCount} warnings`); - // Auto-detect unconfigured PPI in the final text - const ppiWarnings = AutoDetect.scan(finalText, identity); - if (ppiWarnings.length > 0) parts.push(`${ppiWarnings.length} PPI detected`); + // Auto-detect unconfigured PII in the final text + const piiWarnings = AutoDetect.scan(finalText, identity); + if (piiWarnings.length > 0) parts.push(`${piiWarnings.length} PII detected`); stats.textContent = `${allReplacements.length} substitution${allReplacements.length !== 1 ? 's' : ''} (${parts.join(', ')})`; - // Show PPI warnings below stats - if (ppiWarnings.length > 0) { - const ppiDiv = document.createElement('div'); - safeHTML(ppiDiv, `
- Unconfigured PPI detected: - ${ppiWarnings.map(w => `
${escapeHtml(w.value)} — ${w.hint}
`).join('')} + // Show PII warnings below stats + if (piiWarnings.length > 0) { + const piiDiv = document.createElement('div'); + safeHTML(piiDiv, `
+ Unconfigured PII detected: + ${piiWarnings.map(w => `
${escapeHtml(w.value)} — ${w.hint}
`).join('')}
`); - stats.appendChild(ppiDiv); + stats.appendChild(piiDiv); } } From 5ce639f40f35f51d17de87ab96ebce4bbc403da0 Mon Sep 17 00:00:00 2001 From: Claude Date: Sat, 28 Mar 2026 16:28:05 +0000 Subject: [PATCH 7/7] docs: update support section wording https://claude.ai/code/session_01KF4i7Ra7zCEDskxDBaNtcT --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 42ed7c8..932dfaa 100644 --- a/README.md +++ b/README.md @@ -564,7 +564,7 @@ Contributions welcome. If you find a bug, especially a privacy-related one, plea ## Support -Silent Send is a weekend project — built because the developer wanted it and didn't look to see if something else already existed before building it with Claude. No donations needed. If you find it useful, great — enjoy. If it helps you keep your personally identifiable information private, that's thanks enough. More people having access to privacy is the goal. +Silent Send is a weekend project — built because the developer wanted it and could not find what the developer wanted (reveal especially). No donations needed. If you find it useful, great — enjoy. If it helps you keep your personally identifiable information private, that's thanks enough. More people having access to privacy is the goal. That said, Claude access isn't free. If you have a desire to give a coffee back, it would be appreciated — but don't feel any obligation to tip.