DH.DevUtil is a collection of standalone browser-based developer utilities. Security reports about these tools and their handling of local input are welcome.
Please do not publish sensitive proof-of-concept data or real user files in a public issue. If GitHub private vulnerability reporting is enabled for this repository, use it. Otherwise, contact the repository maintainer privately through a channel listed on the maintainer's GitHub profile.
Include the affected tool/file, browser and version, impact, and minimal reproduction steps. Use synthetic or non-sensitive input where possible.
The File Hash Calculator is designed to process selected files in the browser without uploading them. Do not include secrets or private files in a security report unless absolutely necessary; a small synthetic reproducer is preferred.
SHA-1, MD4, and MD5 are available only for legacy compatibility and are not suitable for security-sensitive use. CRC and other non-cryptographic checksums/hashes do not provide protection against malicious modification.