Security

Updated 13 October 2026

Configured protections

The Firebase Hosting configuration includes HTTPS-related transport settings, content type protection, a referrer policy, frame protection, a permissions policy and a Content Security Policy. These are source configuration facts; deployment checks must confirm the headers are served on the public site.

Current limits

Browser-local records are not protected by a skyvison account or encrypted backup service. Protect your device and browser profile. The Content Security Policy currently allows inline scripts and approved third-party library hosts. Cloud drawing sharing is disabled while secure sign-in is being enabled.

skyvison does not claim a penetration-test certification, zero vulnerabilities, or a malware-free installer guarantee.

Report a vulnerability

Contact emsambit@gmail.com with a description of the issue and affected page. Do not publish exploit details in public issues or send passwords, customer data or backup files. No response-time commitment is stated.

Downloads

The deployment process checks Lekhak’s file size and SHA-256 against a release manifest. An integrity check identifies a file; it does not establish that the software is safe. Read the download limitations before installing.