browser pluginzotero connection authorization

After upgrading to the new standalone version I noticed there was no action required to connect the plugin to the zotero app. Which I'm afraid means that there is no authorization required? That is - any malicious website can connect to my local zotero with my premissions?

Probably something like a PIN which I would have to type into the extension to authorize would help?
  • edited September 1, 2017
    The connector connects with the Zotero app via a local connection—it doesn’t permit external sites any access to your computer. The connector also doesn’t read your library (only write to it). It works in exactly the same way as the Zotero for Firefox plugin did.

    You might be confused by having been taken to an authorization page on Zotero.org at some point in the past. This authorization is for saving items directly to the Zotero server when the Zotero app is not open.
Sign In or Register to comment.