About the developer console warning

If you see a "STOP" warning when you opened DevTools, that's our console guard. It exists for one reason: there is a common scam called a self-XSS attack where someone pretends to be RavenFuture support and asks you to paste code into the browser console to "fix" an issue.

What can go wrong

Anything pasted into the console runs as you. That means an attacker can read your session token, exfiltrate every file in your Drive, send messages on your behalf, or invite themselves to documents — all without ever touching your password.

What to do

• Never paste anything into the browser developer console at the request of another person. Not even an admin. Not even someone claiming to be Raven or Isaac.
• RavenFuture support will never ask you to do this. Ever.
• If you suspect you have already pasted something, log out immediately from your topbar avatar menu — that invalidates the session.
• Then email security@ravenfuture.com.