[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Benable

Version 1.591 View in Chrome Web Store

Last scanned: about 2 hours ago

Extension Details

Developer: benable.com

Rating: 5.0 ★ (18 ratings)

Users: 10,000

Context-Aware Verdict

HIGH

Overall Risk

Based on 2 total findings, including 2 high-risk findings.

Findings

HIGH

Broad Host Permissions

This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.

HIGH

High-Risk Permission: cookies

This extension has the cookies permission. Can access and modify browser cookies. This could potentially be used maliciously to compromise security or privacy.

Security Analysis Details

Required Permissions:

cookies
scripting

Host Permissions:

*://*/*

Embedded URLs (544 total):

https://github.com/catamphetamine/libphonenumber-js/issues/239	https://stackoverflow.com/a/46971044/970769
https://github.com/Microsoft/TypeScript-wiki/blob/main/Breaking-Changes.md#extending-built-ins-like-error-array-and-map-may-no-longer-work	https://github.com/substack/semver-compare/blob/master/index.js
https://github.com/catamphetamine/libphonenumber-js/issues/381	https://gitlab.com/catamphetamine/libphonenumber-js/blob/master/METADATA.md
https://github.com/google/libphonenumber/blob/55b2646ec9393f4d3d6661b9c82ef9e258e8b829/javascript/i18n/phonenumbers/phonenumberutil.js#L759-L766	https://gitlab.com/catamphetamine/input-format
https://github.com/catamphetamine/react-phone-number-input/issues/437	https://github.com/googlei18n/libphonenumber/blob/3ea547d4fbaa2d0b67588904dfa5d3f2557c27ff/javascript/i18n/phonenumbers/phonenumberutil.js#L2835
https://github.com/googlei18n/libphonenumber/blob/master/FAQ.md#when-should-i-use-isvalidnumberforregion	https://en.wikipedia.org/wiki/North_American_Numbering_Plan
https://github.com/google/libphonenumber/blob/32719cf74e68796788d1ca45abc85dcdc63ba5b9/java/libphonenumber/src/com/google/i18n/phonenumbers/PhoneNumberUtil.java#L1546	http://www.petitfute.com/voyage/225-info-pratiques-reunion
https://gitlab.com/catamphetamine/libphonenumber-js/-/blob/master/METADATA.md#national_prefix_for_parsing--national_prefix_transform_rule	http://ucken.blogspot.ru/2016/03/trunk-prefixes-in-skype4b.html
https://github.com/catamphetamine/libphonenumber-js/issues/127	https://github.com/google/libphonenumber/blob/876268eb1ad6cdc1b7b5bef17fc5e43052702d57/java/libphonenumber/src/com/google/i18n/phonenumbers/PhoneNumberUtil.java#L3236-L3250
https://github.com/google/libphonenumber/blob/e326fa1fc4283bb05eb35cb3c15c18f98a31af33/java/libphonenumber/src/com/google/i18n/phonenumbers/PhoneNumberUtil.java#L2969-L3004	https://gitlab.com/catamphetamine/libphonenumber-js/-/issues/57
https://wikitravel.org/en/International_dialling_prefix	https://github.com/catamphetamine/libphonenumber-js/issues/376
https://github.com/google/libphonenumber/blob/master/resources/phonenumber.proto	https://gitlab.com/catamphetamine/libphonenumber-js/blob/master/METADATA.md#leading_digits
https://github.com/googlei18n/libphonenumber/commits/master/javascript/i18n/phonenumbers/phonenumberutil.js	https://github.com/googlei18n/libphonenumber/blob/7e1748645552da39c4e1ba731e47969d97bdb539/resources/phonenumber.proto#L36
https://medium.com/dsinjs/implementing-lru-cache-in-javascript-94ba6755cda9	http://www.regular-expressions.info/unicode.html
https://stackoverflow.com/questions/13210194/javascript-regex-equivalent-of-a-za-z-using-pl	https://github.com/danielberndt/babel-plugin-utf-8-regex/blob/master/src/transformer.js
https://stackoverflow.com/questions/15934353/get-index-of-each-capture-in-a-javascript-regex	https://www.instagram.com/
https://api.benable.com	https://benable.com
https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.12.0/css/all.min.css	https://clients2.google.com/service/update2/crx
https://www.ietf.org/rfc/rfc3966.txt	https://github.com/googlei18n/libphonenumber/blob/master/java/libphonenumber/src/com/google/i18n/phonenumbers/PhoneNumberMatcher.java
http://www.w3.org/2000/svg	https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE
https://github.com/then/is-promise/blob/master/index.js	https://github.com/then/is-promise/blob/master/LICENSE
https://svelte.dev/docs/svelte-store#get	http://www.w3.org/1999/xlink
https://github.com/sveltejs/svelte/issues/4233	https://github.com/sveltejs/svelte/issues/3624
https://github.com/darkskyapp/string-hash/blob/master/index.js	https://svelte.dev/docs/svelte#beforeupdate
https://svelte.dev/docs#run-time-server-side-component-api	https://svelte.dev/docs/svelte#onmount
https://svelte.dev/docs/svelte#afterupdate	https://svelte.dev/docs/svelte#ondestroy
https://svelte.dev/docs#template-syntax-component-directives-on-eventname	https://developer.mozilla.org/en-US/docs/Web/API/CustomEvent
https://developer.mozilla.org/en-US/docs/Learn/JavaScript/Building_blocks/Events#Event_bubbling_and_capture	https://developer.mozilla.org/en-US/docs/Web/API/CustomEvent/detail
https://svelte.dev/docs/svelte#createeventdispatcher	https://svelte.dev/docs/svelte#setcontext
https://svelte.dev/docs/svelte#getcontext	https://svelte.dev/docs/svelte#getallcontexts
https://svelte.dev/docs/svelte#hascontext	https://svelte.dev/docs/svelte-compiler#svelte-version
https://github.com/sveltejs/svelte/pull/8512	http://ecma-international.org/ecma-262/7.0/#sec-object.prototype.tostring
http://eev.ee/blog/2015/09/12/dark-corners-of-unicode/	http://www.ecma-international.org/ecma-262/7.0/#sec-ecmascript-language-types
https://mathiasbynens.be/notes/javascript-unicode	http://www.ecma-international.org/ecma-262/7.0/#sec-tointeger
http://ecma-international.org/ecma-262/7.0/#sec-patterns	http://ecma-international.org/ecma-262/7.0/#sec-samevaluezero
http://ecma-international.org/ecma-262/7.0/#sec-properties-of-the-map-prototype-object	http://www.ecma-international.org/ecma-262/7.0/#sec-regexp.prototype.tostring
http://ecma-international.org/ecma-262/7.0/#sec-tolength	http://ecma-international.org/ecma-262/7.0/#sec-object.keys
https://bugs.webkit.org/show_bug.cgi?id=156034	https://github.com/jashkenas/underscore/pull/1247
https://bugs.chromium.org/p/v8/issues/detail?id=90	https://github.com/getsentry/sentry/blob/master/src/sentry/lang/javascript/processor.py#L67
https://github.com/getsentry/sentry-javascript/pull/8981	https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/AggregateError

Page 1 of 7

Raw Manifest

{
  "name": "Benable",
  "icons": {
    "16": "/images/icon16.png",
    "48": "/images/icon48.png",
    "128": "/images/icon128.png"
  },
  "action": {},
  "version": "1.591",
  "background": {
    "service_worker": "background.js"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Save things to beautiful shareable lists, while browsing the web.",
  "permissions": [
    "cookies",
    "scripting"
  ],
  "host_permissions": [
    "*://*/*"
  ],
  "manifest_version": 3,
  "web_accessible_resources": [
    {
      "matches": [
        "http://*/*",
        "https://*/*"
      ],
      "resources": [
        "iframe.html",
        "script.js",
        "iframeLoader.js",
        "popup.html"
      ]
    }
  ]
}

by ✦ Astarte

Benable

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Host Permissions:

Embedded URLs (544 total):

Raw Manifest

Detections

Manifest Findings