[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Tabox - Save and Share Tab Groups

Version 4.1.2 View in Chrome Web Store

Last scanned: about 2 hours ago

Extension Details

Developer: tabox.co

Rating: 4.2 ★ (170 ratings)

Users: 30,000

Context-Aware Verdict

HIGH

Overall Risk

Based on 6 total findings, including 2 high-risk findings.

Findings

HIGH

High-Risk Permission: identity

This extension has the identity permission. Can access your identity information. This could potentially be used maliciously to compromise security or privacy.

HIGH

High-Risk Permission: tabs

This extension has the tabs permission. Can access browser tab information and manipulate tabs. This could potentially be used maliciously to compromise security or privacy.

MEDIUM

Access to Sensitive Domains

This extension requests access to sensitive domains: https://www.googleapis.com/, https://oauth2.googleapis.com/. Ensure you trust this extension with access to these sites.

MEDIUM

Medium-Risk Permission: contextMenus

This extension has the contextMenus permission. Can add items to the context menu.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

MEDIUM

Medium-Risk Permission: unlimitedStorage

This extension has the unlimitedStorage permission. Can store unlimited data locally.

Security Analysis Details

Required Permissions:

tabs
tabGroups
storage
sessions
identity
unlimitedStorage
contextMenus
system.display
alarms

Host Permissions:

https://www.googleapis.com/
https://oauth2.googleapis.com/

Content Security Policy:

extension_pages: script-src 'self'; object-src 'self'

Embedded URLs (32 total):

http://www.w3.org/2000/svg%27%3E%3Cfilter	http://www.w3.org/2000/svg%27%3E%3Cpath
http://www.w3.org/2000/svg	https://twitter.com/Taboxapp
https://www.facebook.com/taboxext	https://oauth2.googleapis.com/token
https://www.googleapis.com/oauth2/v3/tokeninfo?access_token=	https://www.googleapis.com/drive/v3/about?alt=json&fields=user&prettyPrint=false&key=
https://accounts.google.com/o/oauth2/revoke?token=	https://www.googleapis.com/drive/v3/files/?corpora=user&spaces=appDataFolder&fields=files
https://www.googleapis.com/upload/drive/v3/files?uploadType=multipart	https://www.googleapis.com/upload/drive/v3/files/
https://www.googleapis.com/drive/v3/files/	https://accounts.google.com/o/oauth2/v2/auth?
https://fb.me/react-async-component-lifecycle-hooks	http://fb.me/use-check-prop-types
https://react.dev/errors/	http://www.w3.org/1998/Math/MathML
http://www.w3.org/1999/xlink	http://www.w3.org/XML/1998/namespace
http://mozilla.org/MPL/2.0/.	https://github.com/mozilla/webextension-polyfill/issues/130
https://clients2.google.com/service/update2/crx	https://www.googleapis.com/
https://oauth2.googleapis.com/	https://www.googleapis.com/auth/drive.appdata
https://www.googleapis.com/auth/drive.file	https://fonts.googleapis.com
https://fonts.gstatic.com	https://fonts.googleapis.com/css2?family=Inter:wght@400
https://example.com	https://www.google.com/s2/favicons?domain=

Raw Manifest

{
  "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbFz4tW1ZT+Vmf+jMh5GJOLfHVI2UNoEDaqJKn0ZMC+9+9nePws++SBA9/lkQFjTc9symjYrgkr389ZBsPAtLsGC1D099eVrPeADts3pWYn0KopJjXIMBxcqRmffC7VwpYYCxJ1olACQuE1WHRvjNX4J84xWwCLf7lV1dCjB+viNnRLp2VJ7xKDj6/axdco2x9NVK8/0qRlH1eGe3i956hV+u8DkhF9fgH0sKKQACgJRSUE1fF1Y+FvDZFw7EdYSFTAxSxOCblE+8dw5Kwr0edPd3hWRehTV0bawTW4CYyRVhiICW9UogmDpTCkAgXbhzc8sDjHDF96ChdPPQE8KkwIDAQAB",
  "name": "Tabox - Save and Share Tab Groups",
  "icons": {
    "16": "icons/icon16.png",
    "48": "icons/icon48.png",
    "128": "icons/icon128.png"
  },
  "action": {
    "default_icon": "icons/icon128.png",
    "default_popup": "index.html",
    "default_title": "Save and share your tabs!"
  },
  "oauth2": {
    "scopes": [
      "https://www.googleapis.com/auth/drive.appdata",
      "https://www.googleapis.com/auth/drive.file"
    ],
    "client_id": "701423091804-t6v1r6mkl4jdptge49gb7sfstj4holfr.apps.googleusercontent.com"
  },
  "version": "4.1.2",
  "commands": {
    "open-collection-1": {
      "description": "Open the first collection in your list",
      "suggested_key": {
        "mac": "Command+Shift+1",
        "default": "Ctrl+Shift+1"
      }
    },
    "open-collection-2": {
      "description": "Open the 2nd collection in your list",
      "suggested_key": {
        "mac": "Command+Shift+2",
        "default": "Ctrl+Shift+2"
      }
    },
    "open-collection-3": {
      "description": "Open the 3rd collection in your list",
      "suggested_key": {
        "mac": "Command+Shift+3",
        "default": "Ctrl+Shift+3"
      }
    },
    "open-collection-4": {
      "description": "Open the 4th collection in your list",
      "suggested_key": {
        "mac": "Command+Shift+4",
        "default": "Ctrl+Shift+4"
      }
    }
  },
  "incognito": "spanning",
  "background": {
    "service_worker": "background.js"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Save your open tabs into collections and reopen them whenever you want in a single click!",
  "permissions": [
    "tabs",
    "tabGroups",
    "storage",
    "sessions",
    "identity",
    "unlimitedStorage",
    "contextMenus",
    "system.display",
    "alarms"
  ],
  "host_permissions": [
    "https://www.googleapis.com/",
    "https://oauth2.googleapis.com/"
  ],
  "manifest_version": 3,
  "minimum_chrome_version": "89",
  "content_security_policy": {
    "extension_pages": "script-src 'self'; object-src 'self'"
  },
  "web_accessible_resources": [
    {
      "matches": [],
      "resources": [
        "api-keys.json"
      ],
      "extension_ids": []
    }
  ]
}

by ✦ Astarte

Tabox - Save and Share Tab Groups

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Host Permissions:

Content Security Policy:

Embedded URLs (32 total):

Raw Manifest

Detections

Manifest Findings