[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

InTouch: LinkedIn Messages & Contacts Manager

Version 2.23.15 View in Chrome Web Store

Last scanned: 30 minutes ago

Extension Details

Developer: getintouchapp.com

Rating: 4.6 ★ (165 ratings)

Users: 9,000

Context-Aware Verdict

MEDIUM

Overall Risk

Based on 3 total findings, including 1 high-risk finding.

Findings

HIGH

High-Risk Permission: tabs

This extension has the tabs permission. Can access browser tab information and manipulate tabs. This could potentially be used maliciously to compromise security or privacy.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

MEDIUM

Medium-Risk Permission: unlimitedStorage

This extension has the unlimitedStorage permission. Can store unlimited data locally.

Security Analysis Details

Required Permissions:

tabs
power
background
storage
unlimitedStorage
offscreen

Content Security Policy:

extension_pages: script-src 'self'; connect-src *; object-src 'self'; form-action https:

Embedded URLs (249 total):

https://clients2.google.com/service/update2/crx	https://getintouchapp.com/
https://intouchtool.com/	http://www.apache.org/licenses/LICENSE-2.0
https://fonts.googleapis.com/css?family=Roboto:400	https://www.gstatic.com/images/icons/material/system/2x/done_googgreen_36dp.png
https://www.gstatic.com/images/icons/material/system/1x/arrow_drop_down_grey600_18dp.png	https://www.gstatic.com/firebasejs/ui/2.0.0/images/auth/flags_sprite_2x.png
https://www.gstatic.com/images/icons/material/system/1x/visibility_black_24dp.png	https://www.gstatic.com/images/icons/material/system/1x/visibility_off_black_24dp.png
http://getbootstrap.com	https://github.com/twbs/bootstrap/blob/master/LICENSE
https://github.com/h5bp/html5-boilerplate/blob/master/src/css/main.css	https://github.com/google/material-design-lite
http://www.google.com/design/spec/style/color.html	https://twitter.com/miketaylr/status/12228805301
https://github.com/h5bp/html5-boilerplate/issues/440	http://snook.ca/archives/html_and_css/hiding-content-for-accessibility
https://www.drupal.org/node/897638	http://www.phpied.com/delay-loading-your-print-css/
http://www.sanbeiji.com/archives/953	http://css-discuss.incutio.com/wiki/Printing_Tables
http://goo.gl/IPwKi	http://weblog.west-wind.com/posts/2015/Jan/12/main-HTML5-Tag-not-working-in-Internet-Explorer-91011
https://github.com/Polymer/paper-spinner/issues/9	https://code.google.com/p/chromium/issues/detail?id=436255
https://fonts.gstatic.com/s/materialicons/v31/2fcrYFNaTjcS6g4U3t-Y5UEw0lE80llgEseQY3FEmqw.woff2	http://ie.microsoft.com/testdrive/graphics/cssgradientbackgroundmaker/
https://si0.twimg.com/images/dev/cms/intents/bird/bird_blue/bird_16_blue.png	https://github.com/lipis/bootstrap-social
http://jqueryui.com	http://jqueryui.com/themeroller/?bgShadowXPos=&bgOverlayXPos=&bgErrorXPos=&bgHighlightXPos=&bgContentXPos=&bgHeaderXPos=&bgActiveXPos=&bgHoverXPos=&bgDefaultXPos=&bgShadowYPos=&bgOverlayYPos=&bgErrorYPos=&bgHighlightYPos=&bgContentYPos=&bgHeaderYPos=&bgActiveYPos=&bgHoverYPos=&bgDefaultYPos=&bgShadowRepeat=&bgOverlayRepeat=&bgErrorRepeat=&bgHighlightRepeat=&bgContentRepeat=&bgHeaderRepeat=&bgActiveRepeat=&bgHoverRepeat=&bgDefaultRepeat=&iconsHover=url
http://fontawesome.io	http://fontawesome.io/license
https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.eot?v=4.7.0	https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.eot?#iefix&v=4.7.0
https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0	https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff?v=4.7.0
https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.ttf?v=4.7.0	https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.svg?v=4.7.0#fontawesomeregular
https://jquery.com/	https://sizzlejs.com/
https://jquery.org/license	https://github.com/eslint/eslint/issues/6125
http://jquery.org/license	https://jsperf.com/thor-indexof-vs-for/5
http://www.w3.org/TR/css3-selectors/#whitespace	http://www.w3.org/TR/CSS21/syndata.html#value-def-identifier
http://www.w3.org/TR/selectors/#attribute-selectors	http://www.w3.org/TR/CSS21/syndata.html#escaped-characters
https://drafts.csswg.org/cssom/#common-serializing-idioms	https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled
https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled	https://html.spec.whatwg.org/multipage/forms.html#category-listed
https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled	https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled
https://bugs.jquery.com/ticket/13378	https://bugs.jquery.com/ticket/12359
https://msdn.microsoft.com/en-us/library/ie/hh465388.aspx#attribute_section	http://www.w3.org/TR/2011/REC-css3-selectors-20110929/#checked
https://bugs.webkit.org/show_bug.cgi?id=136851	https://github.com/jquery/sizzle/pull/225
http://www.w3.org/TR/selectors/#pseudo-classes	http://www.w3.org/TR/selectors/#lang-pseudo
http://www.w3.org/TR/selectors/#empty-pseudo	https://msdn.microsoft.com/en-us/library/ms536429%28VS.85%29.aspx
https://promisesaplus.com/#point-59	https://promisesaplus.com/#point-48
https://promisesaplus.com/#point-54	https://promisesaplus.com/#point-75
https://promisesaplus.com/#point-64	https://promisesaplus.com/#point-61
https://promisesaplus.com/#point-57	https://bugs.chromium.org/p/chromium/issues/detail?id=378607
https://www.w3.org/TR/DOM-Level-3-Events/#event-type-click	https://www.w3.org/TR/2003/WD-DOM-Level-3-Events-20030331/ecma-script-binding.html
https://bugs.chromium.org/p/chromium/issues/detail?id=470258	https://github.com/eslint/eslint/issues/3229
https://connect.microsoft.com/IE/feedback/details/1736512/	https://jsperf.com/getall-vs-sizzle/2

Page 1 of 4

Raw Manifest

{
  "name": "InTouch: LinkedIn Messages & Contacts Manager",
  "icons": {
    "128": "chrome/img/logo_130.png"
  },
  "action": {
    "default_icon": {
      "128": "chrome/img/logo_130.png"
    },
    "default_popup": "chrome/html/popup.html",
    "default_title": "InTouch Tool"
  },
  "version": "2.23.15",
  "background": {
    "type": "module",
    "service_worker": "/chrome/jsm/lmtllb.js"
  },
  "short_name": "InTouch Tool",
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Manage your LinkedIn messages and contacts in a simple, organized way.",
  "permissions": [
    "tabs",
    "power",
    "background",
    "storage",
    "unlimitedStorage",
    "offscreen"
  ],
  "version_name": "2.23.15",
  "content_scripts": [
    {
      "js": [
        "chrome/js/jquery-3.2.1.min_1.js",
        "chrome/js/lmtlls.js"
      ],
      "css": [
        "chrome/css/material.css",
        "chrome/css/bootstrap-social.css",
        "chrome/css/main.css",
        "chrome/css/dropdown.css",
        "chrome/css/jquery-ui.css",
        "chrome/css/w3.css",
        "chrome/css/font-awesome.css",
        "chrome/css/widget.css"
      ],
      "run_at": "document_idle",
      "matches": [
        "*://*.linkedin.com/*"
      ],
      "all_frames": false
    }
  ],
  "manifest_version": 3,
  "externally_connectable": {
    "matches": [
      "https://getintouchapp.com/*",
      "https://intouchtool.com/*"
    ]
  },
  "minimum_chrome_version": "100",
  "content_security_policy": {
    "extension_pages": "script-src 'self'; connect-src *; object-src 'self'; form-action https:"
  }
}

by ✦ Astarte

InTouch: LinkedIn Messages & Contacts Manager

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Content Security Policy:

Embedded URLs (249 total):

Raw Manifest

Detections

Manifest Findings