read-claude-web-conversation

This module behaves as a high-impact internal export/downloader: it retrieves conversation metadata from the current page route, discovers referenced files/attachments (including tool-provided filepaths), downloads their contents via internal API endpoints, base64-encodes them, and stores them in window.__dl. While it is not overtly obfuscated and does not directly exfiltrate to external domains in this snippet, the combination of bulk file retrieval and global base64 storage creates a significant security risk if backend authorization is weak or if an attacker can cause it to run in the context of sensitive conversations/files. Review and ensure strict server-side access control for both download endpoints and validate/limit which file references the client is allowed to request.