[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Calmly Writer

Version 4.1.4 View in Chrome Web Store

Last scanned: about 3 hours ago

Extension Details

Developer: https://www.calmlywriter.com/

Rating: 4.4 ★ (353 ratings)

Context-Aware Verdict

HIGH

Overall Risk

Based on 6 total findings, including 2 high-risk findings.

Findings

HIGH

High-Risk Permission: <all_urls>

This extension has the <all_urls> permission. Can access all websites and their content. This could potentially be used maliciously to compromise security or privacy.

HIGH

High-Risk Permission: identity

This extension has the identity permission. Can access your identity information. This could potentially be used maliciously to compromise security or privacy.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

MEDIUM

Medium-Risk Permission: unlimitedStorage

This extension has the unlimitedStorage permission. Can store unlimited data locally.

MEDIUM

Medium-Risk Permission: webview

This extension has the webview permission. Can embed web content in the extension.

MEDIUM

Older Manifest Version

This extension uses Manifest Version 2, which has fewer security restrictions than Manifest V3. Consider using extensions that have upgraded to V3.

Security Analysis Details

Required Permissions:

fullscreen
webview
<all_urls>
storage
{:fileSystem=>["write", "retainEntries", "directory"]}
unlimitedStorage
syncFileSystem
identity
https://www.googleapis.com/

Embedded URLs (196 total):

https://www.googleapis.com/chromewebstore/v1.1/userlicenses/	https://www.calmlywriter.com/online.htm
https://www.calmlywriter.com	https://calmlywriter.onfastspring.com/calmly-writer-upgrade
http://schemas.openxmlformats.org/package/2006/relationships	http://schemas.openxmlformats.org/officeDocument/2006/relationships/styles
http://schemas.openxmlformats.org/wordprocessingml/2006/main	http://schemas.openxmlformats.org/drawingml/2006/main
http://schemas.openxmlformats.org/drawingml/2006/picture	http://schemas.openxmlformats.org/officeDocument/2006/relationships/officeDocument
http://schemas.openxmlformats.org/package/2006/content-types	http://schemas.microsoft.com/office/word/2010/wordprocessingCanvas
http://schemas.openxmlformats.org/markup-compatibility/2006	http://schemas.openxmlformats.org/officeDocument/2006/relationships
http://schemas.openxmlformats.org/officeDocument/2006/math	http://schemas.microsoft.com/office/word/2010/wordprocessingDrawing
http://schemas.openxmlformats.org/drawingml/2006/wordprocessingDrawing	http://schemas.microsoft.com/office/word/2010/wordml
http://schemas.microsoft.com/office/word/2012/wordml	http://schemas.microsoft.com/office/word/2010/wordprocessingGroup
http://schemas.microsoft.com/office/word/2010/wordprocessingInk	http://schemas.microsoft.com/office/word/2006/wordml
http://schemas.microsoft.com/office/word/2010/wordprocessingShape	http://schemas.openxmlformats.org/officeDocument/2006/relationships/hyperlink
http://schemas.openxmlformats.org/officeDocument/2006/relationships/image	http://schemas.openxmlformats.org/officeDocument/2006/relationships/numbering
http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd	http://www.w3.org/2000/svg
http://www.w3.org/1999/xhtml	http://james.padolsey.com
http://unlicense.org/UNLICENSE	http://www.apache.org/licenses/
http://www.apache.org/licenses/LICENSE-2.0	https://mths.be/he
https://html.spec.whatwg.org/multipage/syntax.html#table-charref-overrides	https://html.spec.whatwg.org/multipage/syntax.html#table-charref-overrides.
https://mathiasbynens.be/notes/ambiguous-ampersands:	http://html5sec.org/#102
http://html5sec.org/#108	http://html5sec.org/#133.
https://mths.be/punycode.	https://mathiasbynens.be/notes/javascript-encoding#surrogate-formulae
https://mths.be/notes/ambiguous-ampersands	http://neocotic.com
https://chrome.google.com/webstore/detail/calmly-writer/adhdlhedoenicbbncfckobjedmboleig	http://stuartk.com/jszip
https://raw.github.com/Stuk/jszip/master/LICENSE.markdown.	https://github.com/nodeca/pako/blob/master/LICENSE
http://www.webtoolkit.info/	http://unix.stackexchange.com/questions/14705/the-zip-formats-external-file-attribute
http://www.delorie.com/djgpp/doc/rbinter/it/52/13.html	http://www.delorie.com/djgpp/doc/rbinter/it/65/16.html
http://www.delorie.com/djgpp/doc/rbinter/it/66/16.html	https://github.com/nodeca/pako/
http://jsperf.com/converting-a-uint8array-to-a-string/2	http://jsperf.com/arraybuffer-to-string-apply-performance/2
http://stuk.github.io/jszip/documentation/howto/read_zip.html	https://developer.mozilla.org/en-US/docs/JavaScript/Reference/Operators/Bitwise_Operators
http://www.ecma-international.org/publications/files/ECMA-ST/ECMA-262.pdf	http://www.info-zip.org/FAQ.html#backslashes
http://seclists.org/fulldisclosure/2009/Sep/394	http://zlib.net/manual.html#Advanced
http://schemas.zwobble.org/mammoth/style-map	http://wiki.commonjs.org/wiki/Unit_Testing/1.0
http://narwhaljs.org	http://feross.org
https://bugzilla.mozilla.org/show_bug.cgi?id=695438.	http://stackoverflow.com/a/22747272/680742
https://codereview.chromium.org/121173009/	http://en.wikipedia.org/wiki/UTF-8#Description
http://en.wikipedia.org/wiki/ANSI_escape_code#graphics	http://msdn.microsoft.com/en-us/library/ie/dww52sbt
http://underscorejs.org	https://bugs.webkit.org/show_bug.cgi?id=80797
http://docs.python.org/library/functions.html#range	http://wiki.ecmascript.org/doku.php?id=harmony:egal.
http://www.w3.org/XML/1998/namespace	http://www.w3.org/2000/xmlns/
http://www.w3.org/TR/REC-xml/#NT-NameStartChar	http://www.w3.org/TR/REC-xml-names/#defaulting

Page 1 of 3

Raw Manifest

{
  "app": {
    "background": {
      "scripts": [
        "main.js"
      ]
    }
  },
  "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroaKCrptsj2a1M9gay2/sf4urrU9sckC+n34RFguSEZyMNyNp0FAvlgJka2zbjJdexUojzPsE6fV5Rm28xf6XjSSiVlNxUgmIsUUccwi/xSCmOjXRlDv+GVoDr4POjIuUTYFVQkvElH4astU72pNvZWDQsrHuIoMUp4hUvTHM/bpM8wjXzulBR4G8ptNR0WKwfHSP4uQKcr9oiVza0cR5hjoG/Zsfy9bojA8sG5ytuL/aKbu37wW9xztKSTHXyw8DT+UT2ks8+eTfejRrVBxKtLLU2udf+nEY1Z/vMcy6lG8+Jang1+OX434r4tJaPDlU6fi9dz4zR8VYKtD+L50bQIDAQAB",
  "name": "__MSG_appName__",
  "icons": {
    "16": "icon_16.png",
    "128": "icon_128.png"
  },
  "oauth2": {
    "scopes": [
      "https://www.googleapis.com/auth/chromewebstore.readonly"
    ],
    "client_id": "679243812516-51j58eo7cujqhtf7inbr4qi393v9cukc.apps.googleusercontent.com"
  },
  "version": "4.1.4",
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "__MSG_appDesc__",
  "permissions": [
    "fullscreen",
    "webview",
    "<all_urls>",
    "storage",
    {
      "fileSystem": [
        "write",
        "retainEntries",
        "directory"
      ]
    },
    "unlimitedStorage",
    "syncFileSystem",
    "identity",
    "https://www.googleapis.com/"
  ],
  "default_locale": "en",
  "offline_enabled": true,
  "manifest_version": 2,
  "minimum_chrome_version": "35"
}

by ✦ Astarte

Calmly Writer

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Embedded URLs (196 total):

Raw Manifest

Detections

Manifest Findings