HIBERIUS is a single, static HTML file with:
- No backend and no network requests — it cannot exfiltrate data.
- No third-party dependencies — no supply-chain surface.
- A strict Content-Security-Policy meta tag that blocks external connections.
- No
innerHTML/eval/document.writeon user-supplied data — pasted text is inserted as text only.
The latest version on the main branch is supported.
| Version | Supported |
|---|---|
| 3.x | ✅ |
| < 3.0 | ❌ |
If you find a security issue, please report it privately using GitHub's Report a vulnerability feature, or open a minimal issue that does not disclose exploit details publicly.
Please include:
- A description of the issue and its impact.
- Steps to reproduce (a minimal input string is ideal).
- The browser and version you used.
You can expect an initial response within a few days.