Extension Details
Context-Aware Verdict
The extension has a moderate user base of 40,000 users, which suggests some level of community adoption. However, the rating of 3.7 out of 5 with only 52 reviews indicates mixed user satisfaction and limited feedback. The developer "smartsurftools.org" appears to be a smaller entity without established reputation in the extension ecosystem.
The primary concern is the broad host permissions (http://*/*, https://*/*) which grants access to all websites. This is excessive for an extension that simply enables right-click functionality on specific sites. The combination of scripting permission with universal web access creates potential for data harvesting or malicious code injection. The storage permission could be used to collect and store browsing data across all visited sites. While the individual permissions (activeTab, contextMenus, notifications) are reasonable for the stated functionality, their combination with universal host access amplifies the risk.
Consider running this extension in a separate Chrome profile to isolate it from your primary browsing activities. Before installation, verify that the extension only activates on sites where right-click is actually disabled. Monitor the extension's behavior and remove it if you notice unexpected notifications or performance issues. Consider alternative extensions with more limited host permissions that achieve the same functionality, or use browser developer tools as a temporary solution for specific sites.
Findings
Security Analysis Details
Required Permissions:
- storage
- activeTab
- scripting
- contextMenus
- notifications
Host Permissions:
- http://*/*
- https://*/*
Embedded URLs (15 total):
| https://chromewebstore.google.com/detail/right-click-enable/aegpaehcnpbhdmnghlnbnngogbfelnno/reviews | https://clevermathgames.com/right-click-enable-feedback/ | |
| https://webbrowsertools.com/test-right-click | https://clevermathgames.com/wp-json/custom/v1/feedback | |
| http://clevermathgames.com/wp-content/uploads/2024/06/32.png | https://clients2.google.com/service/update2/crx | |
| https://onlineapp.pro/paywall/ | https://onlineapp.pro | |
| https://onlineapp.live | https://onlineapp.stream | |
| https://onlineapp.pro/api/v1/paywall/ | https://onlineapp.pro/api/signout | |
| http://multiplication-flash-cards.tilda.ws/right-click-enable | https://clevermathgames.com/right-click-enable-uninstall/ | |
| http://example.com |
Raw Manifest
{ "name": "__MSG_appName__", "icons": { "16": "/data/icons/16.png", "32": "/data/icons/32.png", "48": "/data/icons/48.png", "64": "/data/icons/64.png", "128": "/data/icons/128.png", "256": "/data/icons/256.png" }, "action": {}, "version": "0.7.6", "commands": { "_execute_action": {} }, "background": { "service_worker": "worker.js" }, "options_ui": { "page": "/data/options/index.html", "open_in_tab": true }, "update_url": "https://clients2.google.com/service/update2/crx", "description": "__MSG_shortDesc__", "permissions": [ "storage", "activeTab", "scripting", "contextMenus", "notifications" ], "default_locale": "en", "host_permissions": [ "http://*/*", "https://*/*" ], "manifest_version": 3 }
ⓘ CRXaminer has partnered with our friends at Secure Annex to provide additional findings unique to their platform.
Secure Annex also analyzes extensions from other browsers, IDEs, and can continuously monitor.
This extension may not yet be analyzed by Secure Annex.