Security

Squeeze is a static, local-first application. It validates file signatures before decoding, limits resource use, isolates primary image work in a browser Worker, and runs under a restrictive Content Security Policy.

For responsible disclosure instructions, see the project’s SECURITY.md file.