[ new scan ] [ statistics ] [ github ] [ twitter ]

uBlock

Version 25.4.0 View in Chrome Web Store

Last scanned: 16 days ago | force re-scan

Extension Details

Developer: https://www.ublock.org/

Rating: 3.5 ★ (2.1K ratings)

Users: 1,000,000

Context-Aware Verdict

MEDIUM

Risk Level

Trust Factors:

- uBlock is a well-known and reputable open-source ad-blocker with over 1 million users.

- The extension is actively maintained and regularly updated.

- The developer has a dedicated website (ublock.org) and a good reputation in the ad-blocking community.

Concerns:

- The extension requests broad permissions like tabs, webRequest, webNavigation, and host permissions for all websites. While necessary for an ad-blocker, these permissions could potentially be abused for malicious purposes.

- The extension has access to unlimited local storage, which could be a privacy concern if the data is not handled securely.

Recommendations:

- While the permissions seem excessive, they are likely necessary for the extension's ad-blocking functionality. However, users should exercise caution and only install the extension from trusted sources.

- For added security, users can run the extension in a separate browser profile or use a dedicated browser instance for browsing with uBlock enabled.

- Users should periodically review the extension's permissions and revoke any unnecessary ones.

- Users should keep the extension updated to the latest version to ensure they have the latest security patches and features.

Overall, while uBlock has broad permissions, its reputation and active development suggest it is likely a legitimate ad-blocker. However, users should still exercise caution and consider the recommendations above to mitigate potential risks.

Security Analysis

CRITICAL

Overall Risk

Based on 6 total findings, ranked without considering overall context, including 4 high-risk and 2 medium-risk findings.

HIGH

Broad Host Permissions

This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.

HIGH

High-Risk Permission: tabs

This extension has the tabs permission. Can access browser tab information and manipulate tabs. This could potentially be used maliciously to compromise security or privacy.

HIGH

High-Risk Permission: webNavigation

This extension has the webNavigation permission. Can track your web navigation. This could potentially be used maliciously to compromise security or privacy.

HIGH

High-Risk Permission: webRequest

This extension has the webRequest permission. Can intercept and modify web requests. This could potentially be used maliciously to compromise security or privacy.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

MEDIUM

Medium-Risk Permission: unlimitedStorage

This extension has the unlimitedStorage permission. Can store unlimited data locally.

Security Analysis Details

Required Permissions:

alarms
declarativeNetRequest
declarativeNetRequestFeedback
tabs
webRequest
webNavigation
storage
unlimitedStorage
scripting

Optional Permissions:

declarativeNetRequestWithHostAccess

Host Permissions:

*://*/*

Embedded URLs (4330 total):

http://mozilla.org/MPL/2.0/.	https://github.com/mozilla/webextension-polyfill/issues/130
https://ublock.org	https://help.ublock.org
https://github.com/then/is-promise/blob/master/index.js	https://github.com/then/is-promise/blob/master/LICENSE
https://svelte.dev/docs/svelte-store#get	http://www.w3.org/2000/svg
http://www.w3.org/1999/xlink	https://github.com/sveltejs/svelte/issues/4233
https://svelte.dev/docs/svelte#beforeupdate	https://svelte.dev/docs#run-time-server-side-component-api
https://svelte.dev/docs/svelte#onmount	https://svelte.dev/docs/svelte#afterupdate
https://svelte.dev/docs/svelte#ondestroy	https://svelte.dev/docs#template-syntax-component-directives-on-eventname
https://developer.mozilla.org/en-US/docs/Web/API/CustomEvent	https://developer.mozilla.org/en-US/docs/Learn/JavaScript/Building_blocks/Events#Event_bubbling_and_capture
https://developer.mozilla.org/en-US/docs/Web/API/CustomEvent/detail	https://svelte.dev/docs/svelte#createeventdispatcher
https://svelte.dev/docs/svelte#setcontext	https://svelte.dev/docs/svelte#getcontext
https://svelte.dev/docs/svelte#getallcontexts	https://svelte.dev/docs/svelte#hascontext
https://svelte.dev/docs/svelte-compiler#svelte-version	https://www.gnu.org/licenses/gpl-3.0.en.html
https://ublock.org/en/privacy	https://support.ublock.org/
http://vectornator.io/	http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd
http://vectornator.io	https://tools.ietf.org/html/rfc7230#section-3.2
https://github.com/github/fetch/issues/748	https://github.com/zloirock/core-js/issues/751
http://www.example.com	https://docs.sentry.io/platforms/javascript/best-practices/browser-extensions/
https://github.com/uuidjs/uuid#getrandomvalues-not-supported	https://developer.mozilla.org/docs/Mozilla/Add-ons/WebExtensions/API/runtime/onMessage
https://github.com/nodeca/pako	https://notification.adblockplus.org/notification.json
https://adblockplus.org/getSubscription?version=%VERSION%&url=%SUBSCRIPTION%&downloadURL=%URL%&error=%ERROR%&responseStatus=%RESPONSESTATUS%	https://easylist-downloads.adblockplus.org/exceptionrules.txt
https://easylist-downloads.adblockplus.org/v3/full/exceptionrules.txt	https://easylist-downloads.adblockplus.org/exceptionrules-privacy-friendly.txt
https://easylist-downloads.adblockplus.org/v3/full/exceptionrules-privacy-friendly.txt	http://abpindo.blogspot.com/
https://easylist-downloads.adblockplus.org/v3/full/abpindo+easylist.txt	https://easylist-downloads.adblockplus.org/abpindo+easylist.txt
http://abpvn.com/	https://easylist-downloads.adblockplus.org/v3/full/abpvn+easylist.txt
https://easylist-downloads.adblockplus.org/abpvn+easylist.txt	https://stanev.org/abp/
https://easylist-downloads.adblockplus.org/v3/full/bulgarian_list+easylist.txt	https://easylist-downloads.adblockplus.org/bulgarian_list+easylist.txt
https://github.com/DandelionSprout/adfilt	https://easylist-downloads.adblockplus.org/v3/full/dandelion_sprouts_nordic_filters+easylist.txt
https://easylist-downloads.adblockplus.org/dandelion_sprouts_nordic_filters+easylist.txt	https://easylist.to/
https://easylist-downloads.adblockplus.org/v3/full/easylist.txt	https://easylist-downloads.adblockplus.org/easylist.txt
https://github.com/easylist/easylistchina/	https://easylist-downloads.adblockplus.org/v3/full/easylistchina+easylist.txt
https://easylist-downloads.adblockplus.org/easylistchina+easylist.txt	https://adblock.sk/
https://easylist-downloads.adblockplus.org/v3/full/easylistczechslovak+easylist.txt	https://easylist-downloads.adblockplus.org/easylistczechslovak+easylist.txt
https://easylist-downloads.adblockplus.org/v3/full/easylistdutch+easylist.txt	https://easylist-downloads.adblockplus.org/easylistdutch+easylist.txt
https://easylist-downloads.adblockplus.org/v3/full/easylistgermany+easylist.txt	https://easylist-downloads.adblockplus.org/easylistgermany+easylist.txt
https://github.com/easylist/EasyListHebrew	https://easylist-downloads.adblockplus.org/v3/full/israellist+easylist.txt
https://easylist-downloads.adblockplus.org/israellist+easylist.txt	https://easylist-downloads.adblockplus.org/v3/full/easylistitaly+easylist.txt
https://easylist-downloads.adblockplus.org/easylistitaly+easylist.txt	https://github.com/EasyList-Lithuania/easylist_lithuania
https://easylist-downloads.adblockplus.org/v3/full/easylistlithuania+easylist.txt	https://easylist-downloads.adblockplus.org/easylistlithuania+easylist.txt
https://easylist-downloads.adblockplus.org/v3/full/easylistpolish+easylist.txt	https://easylist-downloads.adblockplus.org/easylistpolish+easylist.txt

Page 1 of 55

Raw Manifest

{
  "name": "__MSG_name__",
  "icons": {
    "16": "icons/icon-16.png",
    "128": "icons/icon-128.png"
  },
  "action": {
    "default_icon": "icons/icon-128.png",
    "default_popup": "popup.html",
    "default_title": "uBlock"
  },
  "version": "25.4.0",
  "background": {
    "type": "module",
    "service_worker": "assets/worker/service-BjXlrFcV.js"
  },
  "options_ui": {
    "page": "options.html"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "__MSG_description__",
  "permissions": [
    "alarms",
    "declarativeNetRequest",
    "declarativeNetRequestFeedback",
    "tabs",
    "webRequest",
    "webNavigation",
    "storage",
    "unlimitedStorage",
    "scripting"
  ],
  "default_locale": "en",
  "content_scripts": [
    {
      "js": [
        "ewe-content.js"
      ],
      "run_at": "document_start",
      "matches": [
        "http://*/*",
        "https://*/*"
      ],
      "all_frames": true,
      "match_about_blank": true
    }
  ],
  "host_permissions": [
    "*://*/*"
  ],
  "manifest_version": 3,
  "optional_permissions": [
    "declarativeNetRequestWithHostAccess"
  ],
  "minimum_chrome_version": "118.0",
  "declarative_net_request": {
    "rule_resources": [
      {
        "id": "07549D8B-F06F-4D9D-A567-929AA59E9D1D",
        "path": "rulesets/07549D8B-F06F-4D9D-A567-929AA59E9D1D",
        "enabled": false
      },
      {
        "id": "0798B6A2-94A4-4ADF-89ED-BEC112FC4C7F",
        "path": "rulesets/0798B6A2-94A4-4ADF-89ED-BEC112FC4C7F",
        "enabled": false
      },
      {
        "id": "0CD3D105-D3B3-4652-8489-94163DE9A08F",
        "path": "rulesets/0CD3D105-D3B3-4652-8489-94163DE9A08F",
        "enabled": false
      },
      {
        "id": "14DF7BE6-9675-4E07-987A-D8A1000F9FEF",
        "path": "rulesets/14DF7BE6-9675-4E07-987A-D8A1000F9FEF",
        "enabled": false
      },
      {
        "id": "1B5F78CA-8B30-4BDF-B0A3-451CB2202984",
        "path": "rulesets/1B5F78CA-8B30-4BDF-B0A3-451CB2202984",
        "enabled": false
      },
      {
        "id": "1C571EC7-6E52-47CC-B04A-4B3008D0AEBE",
        "path": "rulesets/1C571EC7-6E52-47CC-B04A-4B3008D0AEBE",
        "enabled": false
      },
      {
        "id": "25A31255-AB36-48A4-9086-06192DE71119",
        "path": "rulesets/25A31255-AB36-48A4-9086-06192DE71119",
        "enabled": false
      },
      {
        "id": "2708BCB7-2E45-41BC-B517-1730CF532F89",
        "path": "rulesets/2708BCB7-2E45-41BC-B517-1730CF532F89",
        "enabled": false
      },
      {
        "id": "2CEA1481-C29C-44F1-A084-A2A019533797",
        "path": "rulesets/2CEA1481-C29C-44F1-A084-A2A019533797",
        "enabled": false
      },
      {
        "id": "361001BD-8F57-4736-97B1-F332C3D79E5D",
        "path": "rulesets/361001BD-8F57-4736-97B1-F332C3D79E5D",
        "enabled": false
      },
      {
        "id": "3D2C09D0-DF1C-4C8E-9947-A23DCEAF8F8B",
        "path": "rulesets/3D2C09D0-DF1C-4C8E-9947-A23DCEAF8F8B",
        "enabled": false
      },
      {
        "id": "4B6CE485-30AB-4213-AD17-504B3F2D2825",
        "path": "rulesets/4B6CE485-30AB-4213-AD17-504B3F2D2825",
        "enabled": false
      },
      {
        "id": "684A25C6-6B5D-458A-8A2B-BAC0A12B0B15",
        "path": "rulesets/684A25C6-6B5D-458A-8A2B-BAC0A12B0B15",
        "enabled": false
      },
      {
        "id": "88D3F7EA-D99E-43C6-92E0-D89C8A0E7EA9",
        "path": "rulesets/88D3F7EA-D99E-43C6-92E0-D89C8A0E7EA9",
        "enabled": false
      },
      {
        "id": "8C13E995-8F06-4927-BEA7-6C845FB7EEBF",
        "path": "rulesets/8C13E995-8F06-4927-BEA7-6C845FB7EEBF",
        "enabled": false
      },
      {
        "id": "950C88EA-2DD1-42E3-B2A2-2DF2ED15563A",
        "path": "rulesets/950C88EA-2DD1-42E3-B2A2-2DF2ED15563A",
        "enabled": false
      },
      {
        "id": "96932CD9-6DDF-4D97-B92F-FDF747B6FAA2",
        "path": "rulesets/96932CD9-6DDF-4D97-B92F-FDF747B6FAA2",
        "enabled": false
      },
      {
        "id": "9BD3EA2F-889D-4CC3-B680-CF484F2BD1B9",
        "path": "rulesets/9BD3EA2F-889D-4CC3-B680-CF484F2BD1B9",
        "enabled": false
      },
      {
        "id": "A4B88FB6-E5E5-417F-8A49-20B8244995FD",
        "path": "rulesets/A4B88FB6-E5E5-417F-8A49-20B8244995FD",
        "enabled": false
      },
      {
        "id": "B7D76369-DD19-4602-80E8-2E32DDB490AC",
        "path": "rulesets/B7D76369-DD19-4602-80E8-2E32DDB490AC",
        "enabled": false
      },
      {
        "id": "BBC07C05-66F1-42EC-BD4D-7AD495FAC84B",
        "path": "rulesets/BBC07C05-66F1-42EC-BD4D-7AD495FAC84B",
        "enabled": false
      },
      {
        "id": "C3D13A19-3E8D-41F5-AD64-0F3B36DDE128",
        "path": "rulesets/C3D13A19-3E8D-41F5-AD64-0F3B36DDE128",
        "enabled": false
      },
      {
        "id": "CBE50FA2-DE3F-480C-B1D7-04289391C033",
        "path": "rulesets/CBE50FA2-DE3F-480C-B1D7-04289391C033",
        "enabled": false
      },
      {
        "id": "D4028CDD-3D39-4624-ACC7-8140F4EC3238",
        "path": "rulesets/D4028CDD-3D39-4624-ACC7-8140F4EC3238",
        "enabled": false
      },
      {
        "id": "D99D3350-7F11-43E1-87CB-FDE0C78E8CD6",
        "path": "rulesets/D99D3350-7F11-43E1-87CB-FDE0C78E8CD6",
        "enabled": false
      },
      {
        "id": "E22C3B40-DC90-49D7-8BF5-E60904AB159A",
        "path": "rulesets/E22C3B40-DC90-49D7-8BF5-E60904AB159A",
        "enabled": false
      },
      {
        "id": "EEEF75EC-B2B4-49F4-BC49-17B08266F334",
        "path": "rulesets/EEEF75EC-B2B4-49F4-BC49-17B08266F334",
        "enabled": false
      },
      {
        "id": "EF6F4884-47DB-46A5-AAF8-8EB819D8D4D8",
        "path": "rulesets/EF6F4884-47DB-46A5-AAF8-8EB819D8D4D8",
        "enabled": false
      },
      {
        "id": "F12E0801-A00B-49DE-B1E3-52C9C4F90C8C",
        "path": "rulesets/F12E0801-A00B-49DE-B1E3-52C9C4F90C8C",
        "enabled": false
      }
    ]
  }
}

uBlock

Extension Details

Context-Aware Verdict

Security Analysis

Security Analysis Details

Required Permissions:

Optional Permissions:

Host Permissions:

Embedded URLs (4330 total):

Raw Manifest

Secure Annex (beta)