[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Adobe Target VEC Helper

Version 0.7.1 View in Chrome Web Store

Last scanned: about 1 hour ago

Extension Details

Rating: 2.5 ★ (13 ratings)

Users: 4,000

Context-Aware Verdict

CRITICAL

Overall Risk

Based on 7 total findings, including 4 high-risk findings.

Findings

HIGH

Dangerous Permission Combination: webRequest + webRequestBlocking

This extension can intercept, modify, and block web requests in real-time. This combination could be used to modify sensitive web traffic or steal data.

HIGH

High-Risk Permission: webNavigation

This extension has the webNavigation permission. Can track your web navigation. This could potentially be used maliciously to compromise security or privacy.

HIGH

High-Risk Permission: webRequest

This extension has the webRequest permission. Can intercept and modify web requests. This could potentially be used maliciously to compromise security or privacy.

HIGH

High-Risk Permission: webRequestBlocking

This extension has the webRequestBlocking permission. Can block and modify web requests in real-time. This could potentially be used maliciously to compromise security or privacy.

MEDIUM

Medium-Risk Permission: activeTab

This extension has the activeTab permission. Can access the active tab when clicking the extension icon.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

MEDIUM

Older Manifest Version

This extension uses Manifest Version 2, which has fewer security restrictions than Manifest V3. Consider using extensions that have upgraded to V3.

Security Analysis Details

Required Permissions:

storage
activeTab
webRequest
webRequestBlocking
webNavigation
http://*/*
https://*/*

Content Security Policy:

script-src 'self' https://use.typekit.net; object-src 'self'

Embedded URLs (33 total):

http://polymer.github.io/LICENSE.txt	http://polymer.github.io/AUTHORS.txt
http://polymer.github.io/CONTRIBUTORS.txt	http://polymer.github.io/PATENTS.txt
http://mozilla.org/MPL/2.0/.	https://developer.mozilla.org/docs/Mozilla/Add-ons/WebExtensions/API/runtime/onMessage
https://github.com/mozilla/webextension-polyfill/issues/130	http://cdn.tt.omtrdc.net/cdn/target.js
https://typekit.com/account/kits	http://www.apache.org/licenses/LICENSE-2.0
https://use.typekit.net/	https://github.com/rwu823/react-addons-text-content
http://jedwatson.github.io/classnames	http://www.opensource.org/licenses/mit-license.php
http://pegjs.org/	https://bugs.chromium.org/p/v8/issues/detail?id=4118
https://bugs.chromium.org/p/v8/issues/detail?id=3056	http://fb.me/use-check-prop-types
http://fb.me/prop-types-in-prod	https://reactjs.org/docs/error-decoder.html?invariant=
http://www.w3.org/1999/xlink	http://www.w3.org/XML/1998/namespace
http://www.w3.org/1999/xhtml	http://www.w3.org/1998/Math/MathML
http://www.w3.org/2000/svg	https://fb.me/react-polyfills
http://browserhacks.com/#hack-e71d8692f65334173fee715c222cb805	https://github.com/webpack-contrib/style-loader/issues/177
https://github.com/webpack-contrib/style-loader#insertat	http://stackoverflow.com/a/26603875
https://www.adobe.com/go/vec-helper-browser-extension	https://clients2.google.com/service/update2/crx
https://use.typekit.net

Raw Manifest

{
  "name": "Adobe Target VEC Helper",
  "icons": {
    "16": "icons/icon16.png",
    "32": "icons/icon32.png",
    "38": "icons/icon38.png",
    "48": "icons/icon48.png",
    "128": "icons/icon128.png"
  },
  "version": "0.7.1",
  "background": {
    "scripts": [
      "background.js"
    ]
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Load your website's desktop and mobile views effortlessly in Adobe Target with the VEC helper extension",
  "permissions": [
    "storage",
    "activeTab",
    "webRequest",
    "webRequestBlocking",
    "webNavigation",
    "http://*/*",
    "https://*/*"
  ],
  "browser_action": {
    "default_icon": {
      "32": "icons/icon32_grayscale.png",
      "38": "icons/icon38_grayscale.png"
    },
    "default_popup": "popup.html",
    "default_title": "Adobe Target VEC Helper"
  },
  "content_scripts": [
    {
      "js": [
        "content_top.js",
        "content_main.js"
      ],
      "run_at": "document_start",
      "matches": [
        "http://*.adobe.com/content/mac/*/target/activities.html*",
        "https://*.adobe.com/content/mac/*/target/activities.html*"
      ],
      "all_frames": true
    },
    {
      "js": [
        "content_client.js"
      ],
      "run_at": "document_start",
      "matches": [
        "http://*/*mboxEdit=1*",
        "https://*/*mboxEdit=1*"
      ],
      "all_frames": true
    },
    {
      "js": [
        "content_client.js"
      ],
      "run_at": "document_start",
      "matches": [
        "http://*/*adobe_authoring_enabled=1*",
        "https://*/*adobe_authoring_enabled=1*"
      ],
      "all_frames": true
    },
    {
      "js": [
        "content_top.js",
        "content_client.js"
      ],
      "run_at": "document_start",
      "matches": [
        "http://*/*at_preview_token=*",
        "https://*/*at_preview_token=*"
      ]
    }
  ],
  "manifest_version": 2,
  "content_security_policy": "script-src 'self' https://use.typekit.net; object-src 'self'",
  "web_accessible_resources": [
    "ui_components.js"
  ]
}

by ✦ Astarte

Adobe Target VEC Helper

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Content Security Policy:

Embedded URLs (33 total):

Raw Manifest

Detections

Manifest Findings