What it can and can't protect

Browser Rules is a strong extra layer. These are the things to know about its limits.

• Other archive types can't be looked inside. 7z, RAR, gzip, tar, ISO and similar are blocked by the default policies, because their contents can't be checked. Allow them only from websites you trust.
• Downloads started outside a clicked link (the address bar, forms, scripts) can begin writing to disk before the extension acts. It cancels and removes them, but that's clean-up, not prevention, so it isn't a guaranteed barrier.
• Clipboard patterns can be evaded by text written to avoid them. Block websites that should never touch the clipboard outright.
• Website policies check the page you visit, not frames inside it.
• Only Chrome and Edge with the extension installed are covered. Other browsers, and files from email clients or other apps, aren't.
• Some checks can't be switched off: unsafe ZIPs (path tricks, mismatched headers, links, zip bombs) are always blocked.