• Restricted script execution strictly to the top-level window, blocking iframe injections.
• Added dynamic route validation to execute logic only on playlist pages (/playlist?list=).
• Switched the global mousemove listener to an on-demand tracker active only during drag operations.
• Stopped continuous JSON payload parsing on background network requests once context is captured.
• Filtered header interception to retain only necessary authorization and client tokens.