[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Parallax IDE

Version 0.14.4 View in Chrome Web Store

Last scanned: about 2 hours ago

Extension Details

Developer: http://www.parallax.com/

Rating: 4.7 ★ (10 ratings)

Users: 70,000

Context-Aware Verdict

MEDIUM

Overall Risk

Based on 3 total findings.

Findings

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

MEDIUM

Medium-Risk Permission: unlimitedStorage

This extension has the unlimitedStorage permission. Can store unlimited data locally.

MEDIUM

Older Manifest Version

This extension uses Manifest Version 2, which has fewer security restrictions than Manifest V3. Consider using extensions that have upgraded to V3.

Security Analysis Details

Required Permissions:

serial
unlimitedStorage
syncFileSystem
storage
usb
{:usbDevices=>[{:vendorId=>1027, :productId=>24577}, {:vendorId=>1027, :productId=>24597}]}

Embedded URLs (244 total):

https://lodash.com/	http://dojofoundation.org/
http://underscorejs.org/LICENSE	https://lodash.com/license
http://ecma-international.org/ecma-262/6.0/#sec-patterns	http://ecma-international.org/ecma-262/6.0/#sec-escaperegexppattern
https://en.wikipedia.org/wiki/Combining_Diacritical_Marks	http://ecma-international.org/ecma-262/6.0/#sec-template-literal-lexical-components
https://github.com/jashkenas/underscore/issues/1621	https://github.com/jashkenas/underscore/pull/1247
https://code.google.com/p/v8/issues/detail?id=90	https://es5.github.io/#x11.1.5
http://ecma-international.org/ecma-262/6.0/#sec-object.prototype.tostring	http://ecma-international.org/ecma-262/6.0/#sec-number.max_safe_integer
https://es5.github.io/#JO.	http://ecma-international.org/ecma-262/6.0/#sec-ecmascript-function-objects-call-thisargument-argumentslist
https://es5.github.io/#x13.2.2	https://es5.github.io/#x15.10.6.4
https://bugs.webkit.org/show_bug.cgi?id=142792	http://ecma-international.org/ecma-262/6.0/#sec-tolength
https://code.google.com/p/v8/issues/detail?id=2070	http://ecma-international.org/ecma-262/6.0/#sec-samevaluezero
https://en.wikipedia.org/wiki/Symmetric_difference	https://en.wikipedia.org/wiki/Fisher-Yates_shuffle
http://peter.michaux.ca/articles/lazy-function-definition-pattern	http://drupalmotion.com/article/debounce-and-throttle-visual-explanation
http://ecma-international.org/ecma-262/6.0/#sec-properties-of-the-map-prototype-object	https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Functions/rest_parameters
https://es5.github.io/#x15.3.4.3	https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Operators/Spread_operator
http://www.w3.org/TR/html5/infrastructure.html#internal-structured-cloning-algorithm	http://ecma-international.org/ecma-262/6.0/#sec-number.isfinite
https://es5.github.io/#x8	https://code.google.com/p/v8/issues/detail?id=2291
https://es5.github.io/#x15.1.2.4	http://ecma-international.org/ecma-262/6.0/#sec-object.assign
http://ecma-international.org/ecma-262/6.0/#sec-object.keys	https://en.wikipedia.org/wiki/CamelCase
https://en.wikipedia.org/wiki/Latin-1_Supplement_	https://mths.be/he
https://mathiasbynens.be/notes/ambiguous-ampersands	https://html5sec.org/#59
https://html5sec.org/#102	https://html5sec.org/#108
https://html5sec.org/#133	https://html5sec.org/
http://wonko.com/post/html-escaping	https://en.wikipedia.org/wiki/Letter_case#Special_case_styles
https://es5.github.io/#E	https://code.google.com/p/v8/issues/detail?id=3109
https://en.wikipedia.org/wiki/Exponentiation_by_squaring	https://en.wikipedia.org/wiki/Snake_case
https://en.wikipedia.org/wiki/Letter_case#Stylistic_or_specialised_usage	http://www.html5rocks.com/en/tutorials/developertools/sourcemaps/#toc-sourceurl
https://lodash.com/custom-builds	https://developer.chrome.com/extensions/sandboxingEval
http://ejohn.org/blog/javascript-micro-templating/	https://github.com/olado/doT
https://youtu.be/XAqIpGU8ZZk#t=17m25s	http://requirejs.org/docs/errors.html#mismatch
http://en.wikipedia.org/wiki/ANSI_escape_code#graphics	http://msdn.microsoft.com/en-us/library/ie/dww52sbt
https://github.com/feross/buffer/blob/680e9e5e488f22aac27599a57dc844a6315928dd/index.js	http://feross.org
http://wiki.commonjs.org/wiki/Unit_Testing/1.0	http://narwhaljs.org
https://github.com/ljharb/function.prototype.name/blob/adeeeec8bfcc6068b187d7d9fb3d5bb1d3a30899/implementation.js	https://developer.mozilla.org/en/DOM/window.postMessage
http://www.whatwg.org/specs/web-apps/current-work/multipage/comms.html#crossDocumentMessages	https://github.com/isaacs/readable-stream/issues/16
https://bugzilla.mozilla.org/show_bug.cgi?id=695438.	https://github.com/feross/buffer/pull/97
http://stackoverflow.com/a/22747272/680742	https://en.wikipedia.org/wiki/Base64#URL_applications
https://github.com/beatgammit/base64-js/issues/42	https://codereview.chromium.org/121173009/
http://en.wikipedia.org/wiki/UTF-8#Description	https://jquery.org/
http://ecma-international.org/ecma-262/7.0/#sec-object.prototype.tostring	http://ecma-international.org/ecma-262/7.0/#sec-tolength

Page 1 of 4

Raw Manifest

{
  "app": {
    "background": {
      "scripts": [
        "background.js"
      ]
    }
  },
  "name": "__MSG_appName__",
  "icons": {
    "16": "icons/icon16.png",
    "48": "icons/icon48.png",
    "128": "icons/icon128.png"
  },
  "version": "0.14.4",
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "__MSG_appDescription__",
  "permissions": [
    "serial",
    "unlimitedStorage",
    "syncFileSystem",
    "storage",
    "usb",
    {
      "usbDevices": [
        {
          "vendorId": 1027,
          "productId": 24577
        },
        {
          "vendorId": 1027,
          "productId": 24597
        }
      ]
    }
  ],
  "default_locale": "en",
  "manifest_version": 2
}

by ✦ Astarte

Parallax IDE

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Embedded URLs (244 total):

Raw Manifest

Detections

Manifest Findings