[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

WebCite

Version 4.4.9 View in Chrome Web Store

Last scanned: about 3 hours ago

Extension Details

Rating: 4.3 ★ (6 ratings)

Users: 1,000

Context-Aware Verdict

HIGH

Overall Risk

Based on 7 total findings, including 3 high-risk findings.

Findings

HIGH

High-Risk Permission: downloads

This extension has the downloads permission. Can download files and access download history. This could potentially be used maliciously to compromise security or privacy.

HIGH

High-Risk Permission: identity

This extension has the identity permission. Can access your identity information. This could potentially be used maliciously to compromise security or privacy.

HIGH

High-Risk Permission: tabs

This extension has the tabs permission. Can access browser tab information and manipulate tabs. This could potentially be used maliciously to compromise security or privacy.

MEDIUM

Medium-Risk Permission: activeTab

This extension has the activeTab permission. Can access the active tab when clicking the extension icon.

MEDIUM

Medium-Risk Permission: contextMenus

This extension has the contextMenus permission. Can add items to the context menu.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

MEDIUM

Older Manifest Version

This extension uses Manifest Version 2, which has fewer security restrictions than Manifest V3. Consider using extensions that have upgraded to V3.

Security Analysis Details

Required Permissions:

activeTab
storage
identity
contextMenus
tabs
https://www.easybib.com/credibility/index/json
downloads
downloads.open

Embedded URLs (54 total):

https://www.google.com/	https://www.easybib.com/credibility/index/json?url=
https://www.blueletterbible.org/	http://www.foxnews.com/
http://www.cnn.com/	https://www.cnn.com/
https://www.yahoo.com/news/	https://www.huffingtonpost.com/
https://abcnews.go.com/	https://www.nytimes.com/
https://www.cbsnews.com/	https://www.drudgereport.com/
https://www.usatoday.com/	https://www.nbcnews.com/
https://www.washingtonpost.com/	https://www.latimes.com/
https://www.nydailynews.com/	https://maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css
https://sites.google.com/view/webcite-terms-of-service	https://www.google.com
https://www.googleapis.com/upload/drive/v2/files?	https://www.googleapis.com/upload/drive/v2/files/
https://www.w3schools.com/howto/howto_js_snackbar.asp	https://nodei.co/npm/utils-extend.png?downloads=true&downloadRank=true&stars=true
https://nodei.co/npm/utils-extend/	https://registry.npmjs.org/utils-extend/-/utils-extend-1.0.8.tgz
https://github.com/douzi8/utils-extend/issues	https://github.com/douzi8/utils-extend#readme
https://github.com/douzi8/utils-extend.git	https://registry.npmjs.org/file-match/-/file-match-1.0.2.tgz
https://github.com/douzi8/file-match/issues	https://github.com/douzi8/file-match#readme
https://github.com/douzi8/file-match.git	https://nodei.co/npm/file-system.png?downloads=true&downloadRank=true&stars=true
https://nodei.co/npm/file-system/	https://github.com/douzi8/file-match
https://github.com/douzi8/file-match#filter-description	https://github.com/douzi8/base64-img#base64filename-callback
https://github.com/douzi8/base64-img#base64syncfilename	https://registry.npmjs.org/file-system/-/file-system-2.2.2.tgz
https://github.com/douzi8/file-system/issues	https://github.com/douzi8/file-system
https://github.com/douzi8/file-system.git	http://www.apache.org/licenses/LICENSE-2.0
https://www.googleapis.com/drive/v2/	https://www.googleapis.com/upload/drive/v2/files?uploadType=resumable
https://accounts.google.com/o/oauth2/revoke?token=	https://clients2.google.com/service/update2/crx
https://www.googleapis.com/auth/drive	https://www.easybib.com/credibility/index/json
http://www.w3.org/2000/svg	https://docs.google.com/document/
https://www.youtube.com/	https://youtu.be/tY9niqoQ3do?t=357

Raw Manifest

{
  "name": "WebCite",
  "icons": {
    "16": "assets/ezcite16.png",
    "48": "assets/ezcite48.png",
    "128": "assets/ezcite128.png"
  },
  "author": "dandevelopment",
  "oauth2": {
    "scopes": [
      "https://www.googleapis.com/auth/drive"
    ],
    "client_id": "697231731558-78un0rrdccfqn4cm5k3hqni0t95oh41r.apps.googleusercontent.com"
  },
  "version": "4.4.9",
  "background": {
    "scripts": [
      "gdocs.js",
      "backround.js",
      "tools.js"
    ]
  },
  "options_ui": {
    "page": "options.html",
    "chrome_style": true
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Citation maker exports webpages, check credibility, built in bibliography. MLA 8, MLA 7, APA. EZcite. Easybib. Noodletools. Cite",
  "permissions": [
    "activeTab",
    "storage",
    "identity",
    "contextMenus",
    "tabs",
    "https://www.easybib.com/credibility/index/json",
    "downloads",
    "downloads.open"
  ],
  "browser_action": {
    "default_icon": "assets/icon.png",
    "default_popup": "cite.html"
  },
  "offline_enabled": true,
  "manifest_version": 2
}

by ✦ Astarte

WebCite

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Embedded URLs (54 total):

Raw Manifest

Detections

Manifest Findings