[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

List Highlighter for Trello

Version 5.0.3 View in Chrome Web Store

Last scanned: about 17 hours ago

Extension Details

Developer: http://beingmrkenny.co.uk/

Rating: 4.3 ★ (50 ratings)

Users: 10,000

Context-Aware Verdict

LOW

Overall Risk

Trust Factors:

The extension has a reasonable user base of 10,000 users with a solid 4.3-star rating from 50 reviews, indicating positive user experiences. The developer maintains a personal website, providing some accountability. The extension's purpose is clearly defined for Trello list highlighting functionality, and it uses Manifest V3, which offers better security standards.

Concerns:

The storage permission, while flagged as medium risk, is actually appropriate for this extension's functionality as it likely needs to save user preferences for list highlighting settings. The content script injection is properly scoped to Trello domains only, which is exactly what you'd expect for a Trello-specific tool. However, the limited number of reviews (50) means the sample size for user feedback is relatively small.

Recommendations:

This extension appears to be legitimate and well-scoped for its intended purpose. The permissions requested align with the functionality described. You can safely install this extension in your main Chrome profile, as the risk level is genuinely low. The developer has appropriately limited the extension's access to only Trello domains, demonstrating good security practices. Monitor for any unusual behavior, but this extension follows security best practices for a productivity tool.

Findings

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Security Analysis Details

Required Permissions:

storage

Embedded URLs (27 total):

http://www.w3.org/2000/svg	http://www.w3.org/1999/xlink
http://www.bohemiancoding.com/sketch	https://boxy-svg.com
https://gist.github.com/mjackson/5311256	https://stackoverflow.com/questions/17242144/javascript-convert-hsb-hsv-color-to-rgb-accurately
https://stackoverflow.com/a/37953806/6088312	https://stackoverflow.com/questions/2637058
https://bugzilla.mozilla.org/show_bug.cgi?id=505521	http://eligrey.com
https://github.com/eligrey/FileSaver.js/blob/master/LICENSE.md	http://purl.eligrey.com/github/FileSaver.js
https://stackoverflow.com/q/3277182/1008999	https://www.whatismybrowser.com/guides/the-latest-user-agent/macos
http://www.jacklmoore.com/autosize	https://bugzilla.mozilla.org/show_bug.cgi?id=889376
http://www.raphaeljs.com	https://clients2.google.com/service/update2/crx
https://beingmrkenny.co.uk/web-extensions/list-highlighter-trello	https://beingmrkenny.co.uk/web-extensions/list-highlighter-trello/version-5
http://beingmrkenny.co.uk/web-extensions/list-highlighter-trello	https://github.com/DavidDurman/FlexiColorPicker
http://www.jacklmoore.com/autosize/	http://www.jacklmoore.com/
https://sortablejs.github.io/Sortable/	https://github.com/RubaXa
https://github.com/SortableJS

Raw Manifest

{
  "name": "List Highlighter for Trello",
  "icons": {
    "16": "img/192.png",
    "32": "img/192.png",
    "48": "img/192.png",
    "64": "img/192.png",
    "256": "img/256.png"
  },
  "action": {
    "default_icon": "img/buttonIcon.png",
    "default_popup": "popup.html",
    "default_title": "List Highlighter"
  },
  "author": "Mark Kenny",
  "version": "5.0.3",
  "background": {
    "service_worker": "js/background.js"
  },
  "options_ui": {
    "page": "options-page/index.html",
    "open_in_tab": true
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Change list background colours",
  "permissions": [
    "storage"
  ],
  "homepage_url": "https://beingmrkenny.co.uk/web-extensions/list-highlighter-trello",
  "content_scripts": [
    {
      "js": [
        "js/third/autosize.js",
        "js/classes/Global.js",
        "js/classes/Color.js",
        "js/classes/StorageLegacy.js",
        "js/classes/Options.js",
        "js/classes/Rules.js",
        "js/classes/DataStorage.js",
        "js/front-end/InsertedCSS.js",
        "js/front-end/RulesMatcher.js",
        "js/front-end/TrelloPage.js",
        "js/front-end/System.js",
        "js/functions.js",
        "js/init.js"
      ],
      "run_at": "document_start",
      "matches": [
        "*://trello.com/*"
      ],
      "all_frames": true
    },
    {
      "css": [
        "css/style.css"
      ],
      "run_at": "document_end",
      "matches": [
        "*://trello.com/*"
      ]
    }
  ],
  "manifest_version": 3,
  "web_accessible_resources": [
    {
      "matches": [],
      "resources": [
        "img/buttonIcon.png",
        "img/buttonIconOff.png",
        "img/expand.svg"
      ]
    }
  ]
}

by ✦ Astarte