visave 0.3.3 preview: download resource limits

This preview fixes the three resource-exhaustion paths in the supplied security report. Update both the Firefox extension and the Windows companion.

Fixed

• Invalid native-message framing ends the connection after one error. Page URLs and native request sizes are bounded before transmission.
• Extractor metadata is limited to 16 MiB before decoding. A Windows Job Object limits committed memory to 1 GiB per process and 2 GiB for the downloader process tree. Downloader output is also bounded.
• Collection results are rejected before entries are processed. Each request permits one selected video; audio/video merging and MP3 conversion still work.

Update

Load the 0.3.3 extension ZIP temporarily, open visave Settings > Installation > Install dependencies, open visave-setup-0.3.3.exe, and select Install. An older companion is reported incomplete; downloads stay disabled until the current protections are detected. Choose your save folder once in Settings.

Checks

57 native tests and 33 JavaScript tests passed, including a real compressed metadata response, repeated videos inside a template, oversized frame bodies, and worker/child memory limits. Firefox checks, isolated installation lifecycle checks, and packaged MP4/MP3 downloads passed; the MP4 fixture retained 60 FPS. A public Blender YouTube metadata simulation also succeeded without cookies or media downloads. These checks cover specific paths, not every site.

See security-fix details. This fixes the reviewed mechanisms; it is not an independent audit or a statement that scanner findings have been closed.

Windows x64 only. The installer and Firefox preview remain unsigned. Mozilla signing and AMO approval are pending. Firefox requires users to open the installer themselves; no security protections are bypassed.

visave 0.3.2 preview: setup from the extension

Download setup directly from visave Settings, then return to Firefox when installation finishes.

Setup

1. Load the unsigned Firefox preview ZIP temporarily. Open visave > Settings > Installation > Install dependencies.
2. Open visave-setup-0.3.2.exe from Firefox Downloads and select Install. Setup needs internet access and installs components only for your Windows user. No administrator access is required.
3. Return to visave. Automatic checks enable downloads when yt-dlp, the YouTube solver, FFmpeg, FFprobe, Node.js and saved-folder support are detected. Check installation is also available manually.
4. Choose your download folder once in Settings.

The installer is unsigned. Windows may show an unknown publisher. This release does not advise bypassing Windows protections. Firefox cannot silently install native programs, so opening setup and selecting Install are required.

Validation

31 JavaScript tests, 48 native tests, Firefox extension lint with zero findings, bootstrap and publisher-download integrity tests, 28 real Firefox checks, isolated Windows install/upgrade/uninstall, and packaged MP4/MP3 downloads passed. The MP4 test preserved 60 FPS. Tests used generated local media; they do not guarantee every site or video will work.

Windows x64 only. This is an unsigned temporary Firefox preview, not an AMO-approved release. DRM media is unsupported. Source and readable setup scripts are included for review; checksums detect file changes and do not prove safety.

visave 0.3.1 · Windows preview

First public preview of senzdev | visave, made by senzdev.

Download visave-windows-0.3.1.zip and extract it. Open START-HERE.html, then run Setup.cmd. Windows 10/11 x64 and internet access are required. Setup installs private Python, Node.js and yt-dlp, downloads pinned FFmpeg directly from its publisher, verifies files, tests conversion and registers the Firefox connection for your Windows user.

The Firefox extension is unsigned. Open about:debugging#/runtime/this-firefox, select Load Temporary Add-on and choose visave-firefox-0.3.1.zip from the Windows bundle. Firefox removes temporary add-ons on restart. Permanent installation needs Mozilla signing, which has not been completed.

In visave, use Settings > Installation > Check installation, then Settings > Save downloaded files to > Choose folder. Future downloads use that folder without opening Explorer.

Optional PowerShell setup:

irm https://raw.githubusercontent.com/senzore/visave/v0.3.1/install.ps1 | iex

This executes the published script. You can inspect install.ps1 or use the extracted ZIP instead. The supplied checksum detects changes; it is not proof that software is harmless. This preview has not had an independent security audit.

Verified locally: 28 JavaScript tests, 47 native tests, Firefox extension validation with no warnings, real Firefox popup/menu/current-video behavior, saved-folder downloads, packaged MP4/MP3 conversion with 60 FPS video preserved, and isolated install/upgrade/uninstall. Tampered bundles and unsafe archive paths are rejected. Clean-machine testing, authenticated Instagram checks and Mozilla review remain.

Site extractors do not guarantee every website or video works. DRM downloads and active live streams are disabled. Download only where you have the rights and the platform permits the method. Privacy · Firefox release and platform rules · Security notes.

Assets: Windows companion bundle and checksum, standalone unsigned Firefox ZIP, and readable source archive.