Release Notes — CipherPrompt DLP v5.43.0

🔒 New Confidential Data DLP Detection Rules
Slack API Tokens: xox[baprs]-[a-zA-Z0-9]{10,48}
JWT (JSON Web Tokens): eyJ[a-zA-Z0-9_-]{10,}.eyJ[a-zA-Z0-9_-]{10,}.[a-zA-Z0-9_-]{10,}
Database Connection URIs: PostgreSQL, MySQL, MongoDB, Redis, and MSSQL connection strings ((?:postgres|postgresql|mysql|mongodb|mongodb+srv|redis|mssql):\/\/...)
Hugging Face Access Tokens: hf_[a-zA-Z0-9]{34,}

Added
Custom platform support: users can now add any website as a monitored platform directly from the Options page. Type a domain (e.g. my-company-llm.com), grant the one-time host permission, and CipherPrompt DLP will inspect paste & drop on that site just like the built-in platforms.
The scripting permission enables runtime content-script registration via chrome.scripting.registerContentScripts, so user-added domains receive the DLP content script without requiring an extension update or manifest change.
Domains persist across sessions (persistAcrossSessions: true) and survive browser restarts.
Removing a custom domain automatically revokes the host permission and unregisters the content script.
The Options page now shows both built-in and user-added platforms in a unified domain list with add / remove controls.