[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

セカイブラウザ Google Chrome拡張機能

Version 1.2.1 View in Chrome Web Store

Last scanned: about 9 hours ago

Extension Details

Rating: 3.6 ★ (5 ratings)

Users: 3,000

Context-Aware Verdict

HIGH

Overall Risk

Based on 4 total findings, including 3 high-risk findings.

Findings

HIGH

Broad Host Permissions

This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.

HIGH

High-Risk Permission: proxy

This extension has the proxy permission. Can control proxy settings. This could potentially be used maliciously to compromise security or privacy.

HIGH

High-Risk Permission: webRequest

This extension has the webRequest permission. Can intercept and modify web requests. This could potentially be used maliciously to compromise security or privacy.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Security Analysis Details

Required Permissions:

proxy
storage
webRequest
webRequestAuthProvider

Host Permissions:

<all_urls>

Content Security Policy:

extension_pages: script-src 'self'; object-src 'none'

Embedded URLs (18 total):

https://github.com/wxt-dev/wxt/issues/371	https://wxt.dev/guide/testing.html
https://www.interlink.or.jp/support/browser/sbchrome.xml	https://faq.interlink.or.jp/faq2/View/wcDisplayContent.aspx?id=515
https://reactjs.org/docs/error-decoder.html?invariant=	http://www.w3.org/1999/xlink
http://www.w3.org/XML/1998/namespace	http://www.w3.org/2000/svg
http://www.w3.org/1998/Math/MathML	http://www.w3.org/1999/xhtml
https://auth.skv.moe/sekai_cm/auth/chrome	https://www.interlink.or.jp/support/vpn/sekaivpn/forward/01.html
http://www.bohemiancoding.com/sketch/ns	https://clients2.google.com/service/update2/crx
http://getbootstrap.com	https://github.com/twbs/bootstrap/blob/master/LICENSE
https://github.com/h5bp/html5-boilerplate/blob/master/src/css/main.css	http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd

Raw Manifest

{
  "name": "セカイブラウザ Google Chrome拡張機能",
  "icons": {
    "16": "icon/icon_green_16px.png",
    "48": "icon/icon_green_48px.png",
    "128": "icon/icon_green_128px.png"
  },
  "action": {
    "default_icon": "icon/icon_grey_128px.png",
    "default_popup": "popup.html",
    "default_title": "セカイブラウザ Google Chrome拡張機能"
  },
  "version": "1.2.1",
  "background": {
    "service_worker": "background.js"
  },
  "short_name": "sekaibrowser",
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "セカイVPN契約者向けのGoogle Chrome拡張機能です。",
  "permissions": [
    "proxy",
    "storage",
    "webRequest",
    "webRequestAuthProvider"
  ],
  "host_permissions": [
    "<all_urls>"
  ],
  "manifest_version": 3,
  "content_security_policy": {
    "extension_pages": "script-src 'self'; object-src 'none'"
  }
}

by ✦ Astarte

セカイブラウザ Google Chrome拡張機能

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Host Permissions:

Content Security Policy:

Embedded URLs (18 total):

Raw Manifest

Detections

Manifest Findings