Please use GitHub's private vulnerability-reporting feature when available, or contact the repository owner privately. Do not post a live Play.net ticket, account credential, captured native message, or unredacted network trace in a public issue.

A Play.net game ticket is a temporary credential. The extension limits interception to the GSIV Prime launch page, projects only the expected protocol fields, and sends the ticket through Chrome native messaging. The native helper accepts only the installed extension ID, validates the fixed game destination, reads executable paths from its private local configuration, and never places the ticket in process arguments or result messages.

This project does not bypass Play.net authentication. It can use only a ticket already issued to the signed-in browser session.