[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Smartflo Softphone

Version 2.10.11 View in Chrome Web Store

Last scanned: about 21 hours ago

Extension Details

Rating: 2.8 ★ (12 ratings)

Users: 50,000

Context-Aware Verdict

MEDIUM

Overall Risk

Based on 3 total findings, including 1 high-risk finding.

Findings

HIGH

High-Risk Permission: identity

This extension has the identity permission. Can access your identity information. This could potentially be used maliciously to compromise security or privacy.

MEDIUM

Medium-Risk Permission: notifications

This extension has the notifications permission. Can show notifications.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Security Analysis Details

Required Permissions:

storage
microphone
background
notifications
identity

Content Security Policy:

extension_pages: script-src 'self'; object-src 'self'

Embedded URLs (52 total):

http://www.w3.org/2000/svg	https://clients2.google.com/service/update2/crx
https://www.framer.com/docs/guide-upgrade/##shared-layout-animations	http://fb.me/use-check-prop-types
https://cdn.jsdelivr.net/gh/lipis/flag-icons/flags/4x3/	https://reactjs.org/docs/error-decoder.html?invariant=
http://www.w3.org/1999/xlink	http://www.w3.org/XML/1998/namespace
http://www.w3.org/1999/xhtml	http://www.w3.org/1998/Math/MathML
https://github.com/ankeetmaini/react-infinite-scroll-component/issues/59	https://redux.js.org/Errors?code=
https://reactjs.org/link/react-polyfills	https://smartflo.tatateleservices.com/knowledgebase/
https://active-extensions.ttsl.tel:3006/	https://api.ipify.org/
https://cloudphone.tatateleservices.com/api/v1/auth/verify_azure_user	https://login.microsoftonline.com/common
https://cloudphone.tatateleservices.com/images/ms-white-31.png	https://login.microsoftonline.com/common/
https://github.com/uuidjs/uuid#getrandomvalues-not-supported	https://login.microsoftonline.com/common/discovery/instance?api-version=1.1&authorization_endpoint=
http://169.254.169.254/metadata/instance/compute/location	https://aka.ms/msaljs/optional-claims
https://tools.ietf.org/html/rfc7515	https://login.microsoftonline.com
https://login.windows-ppe.net	https://login.chinacloudapi.cn
https://login.microsoftonline.de	https://login.microsoftonline.us
https://docs.microsoft.com/en-us/azure/active-directory/develop/msal-js-initializing-client-applications#configuration-options	https://login.microsoftonline.com/
https://login.chinacloudapi.cn/	https://login.partner.microsoftonline.cn/
https://login.microsoftonline.us/	https://tinyurl.com/y2uuvskb
http://bit.ly/2kdckMn	https://jssip.net
https://github.com/jmillan	https://inakibaz.me
https://github.com/versatica/JsSIP.git	https://github.com/versatica/JsSIP/issues
https://github.com/electron-react-boilerplate/electron-react-boilerplate/issues	https://github.com/electron-react-boilerplate/electron-react-boilerplate#readme
https://opencollective.com/electron-react-boilerplate-594	http://jedwatson.github.io/classnames
https://feross.org	http://www.apache.org/licenses/LICENSE-2.0
https://mths.be/utf8js	https://feross.org/opensource
https://getbootstrap.com/	https://github.com/twbs/bootstrap/blob/main/LICENSE

Raw Manifest

{
  "name": "Smartflo Softphone",
  "icons": {
    "128": "images/smartflo/favicon.png"
  },
  "action": {
    "default_icon": "images/smartflo/favicon.png"
  },
  "version": "2.10.11",
  "background": {
    "type": "module",
    "service_worker": "background.js"
  },
  "short_name": "Smartflo Softphone",
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Smartflo integrated softphone",
  "permissions": [
    "storage",
    "microphone",
    "background",
    "notifications",
    "identity"
  ],
  "manifest_version": 3,
  "content_security_policy": {
    "extension_pages": "script-src 'self'; object-src 'self'"
  },
  "web_accessible_resources": [
    {
      "matches": [],
      "resources": [
        "images/*",
        "assets/*",
        "index.html"
      ],
      "extension_ids": []
    }
  ]
}

by ✦ Astarte

Smartflo Softphone

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Content Security Policy:

Embedded URLs (52 total):

Raw Manifest

Detections

Manifest Findings