{
  "manifest_version": 3,
  "name": "PlistSettingsClient KVC over-release POC",
  "version": "1.0",
  "description": "Calls chrome.enterprise.reportingPrivate.getSettings with a KVC key path that invokes -autorelease on a browser-process NSDictionary, producing an ObjC over-release / UAF when the ThreadPool worker drains its autorelease pool.",
  "permissions": [
    "enterprise.reportingPrivate"
  ],
  "background": {
    "service_worker": "background.js"
  }
}