[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

CheerpJ Applet Runner

Version 2026.9 View in Chrome Web Store

Last scanned: about 3 hours ago

Extension Details

Developer: Leaning Technologies Limited

Rating: 4.6 ★ (286 ratings)

Users: 100,000

Context-Aware Verdict

MEDIUM

Overall Risk

Based on 2 total findings.

Findings

MEDIUM

Medium-Risk Permission: activeTab

This extension has the activeTab permission. Can access the active tab when clicking the extension icon.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Security Analysis Details

Required Permissions:

scripting
activeTab
storage
declarativeNetRequestWithHostAccess
alarms

Content Security Policy:

extension_pages: script-src 'self'; object-src 'self'

Embedded URLs (32 total):

http://www.w3.org/2000/svg	http://www.w3.org/1999/xlink
https://labs.leaningtech.com/feedback-appletrunner	https://jnlp-runner.leaning-technologies.workers.dev/verify?licenseKey=
https://cheerpj.com/	https://labs.leaningtech.com/docs/cheerpj-applet-runner
https://github.com/leaningtech/cheerpj-applet-runner/issues/new	https://cheerpj.com/contact/
https://github.com/leaningtech/cheerpj-applet-runner/issues/new?&title=Bug+report+for:+	https://microsoftedge.microsoft.com/addons/detail/cheerpj-applet-runner/
https://chromewebstore.google.com/detail/cheerpj-applet-runner/	https://fonts.googleapis.com/icon?family=Material+Icons
https://labs.leaningtech.com/cheerpj-applet-runner	https://leaningtech.com/
https://labs.leaningtech.com/payment-applet	https://labs.leaningtech.com/payment-jnlp
https://labs.leaningtech.com/docs/cheerpj-applet-runner/licensing	https://cheerpj.com/docs/reference/cheerpjInit#overrideshortcuts
https://cheerpj.com/docs/reference/cheerpjInit#hostname	https://cheerpj.com/docs/guides/Networking
https://cheerpj.com/docs/reference/cheerpjInit#execcallback	https://labs.leaningtech.com/docs/cheerpj-jnlp-runner
https://github.com/golang/go/issues/28975	https://cheerpj.com/docs/licensing
http://www.brynosaurus.com/cachedir/	http://ocsp.example.net:80
http://www.w3.org/TR/1999/REC-xslt-19991116	http://www.w3.org/2001/04/xmldsig-more#rsa-md5
http://www.w3.org/2001/04/xmldsig-more#hmac-md5	http://www.w3.org/2001/04/xmldsig-more#md5
http://some.company.com/cacert	https://clients2.google.com/service/update2/crx

Raw Manifest

{
  "name": "CheerpJ Applet Runner",
  "icons": {
    "32": "cheerpjAR_32x32.png",
    "128": "cheerpjAR_128x128.png"
  },
  "action": {
    "default_icon": "cheerpjAR_128x128_gray.png",
    "default_popup": "popup.html",
    "default_title": "CheerpJ Applet Runner Disabled"
  },
  "storage": {
    "managed_schema": "storage_schema.json"
  },
  "version": "2026.9",
  "background": {
    "service_worker": "bg.js"
  },
  "options_ui": {
    "page": "extension_options.html",
    "open_in_tab": true
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Run Java applets without installing Java",
  "permissions": [
    "scripting",
    "activeTab",
    "storage",
    "declarativeNetRequestWithHostAccess",
    "alarms"
  ],
  "manifest_version": 3,
  "content_security_policy": {
    "extension_pages": "script-src 'self'; object-src 'self'"
  },
  "web_accessible_resources": [
    {
      "matches": [
        "<all_urls>"
      ],
      "resources": [
        "cheerpj/*",
        "init_applet.js"
      ]
    }
  ],
  "optional_host_permissions": [
    "http://*/",
    "https://*/"
  ]
}

by ✦ Astarte

CheerpJ Applet Runner

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Content Security Policy:

Embedded URLs (32 total):

Raw Manifest

Detections

Manifest Findings