Keep client secrets in add-on storage; host only verifies and serves the local API.

2026-09-22 07:42:10 -04:00
parent de0814f3ed
commit 41c83dabac
13 changed files with 185 additions and 290 deletions
@@ -6,7 +6,8 @@
 </head>
 <body class="popup">
  <h1>Bookmarks API</h1>
-  <p id="status" class="muted">Checking host…</p>
+  <p class="muted">An API add-on for Firefox so agents and scripts can manage your bookmarks.</p>
+  <p id="status" class="muted">Checking…</p>
  <button id="manage" type="button">Manage clients</button>
  <script src="popup.js"></script>
 </body>