[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Talkdesk Callbar

Version 1.53.6 View in Chrome Web Store

Last scanned: about 2 hours ago

Extension Details

Rating: 4.1 ★ (11 ratings)

Users: 8,000

Context-Aware Verdict

MEDIUM

Overall Risk

Based on 4 total findings, including 1 high-risk finding.

Findings

HIGH

High-Risk Permission: identity

This extension has the identity permission. Can access your identity information. This could potentially be used maliciously to compromise security or privacy.

MEDIUM

Medium-Risk Permission: notifications

This extension has the notifications permission. Can show notifications.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

MEDIUM

Older Manifest Version

This extension uses Manifest Version 2, which has fewer security restrictions than Manifest V3. Consider using extensions that have upgraded to V3.

Security Analysis Details

Required Permissions:

alwaysOnTopWindows
audioCapture
storage
notifications
browser
identity
https://*.talkdeskid.com/*
https://*.talkdeskid.eu/*
https://*.talkdeskidca.com/*

Embedded URLs (88 total):

http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd	http://www.w3.org/2000/svg
http://www.w3.org/1999/xlink	http://www.bohemiancoding.com/sketch
https://lodash.com/	https://js.foundation/
https://lodash.com/license	http://underscorejs.org/LICENSE
https://npms.io/search?q=ponyfill.	http://momentjs.com/guides/#/warnings/define-locale/
http://momentjs.com/guides/#/warnings/js-date/	http://momentjs.com/guides/#/warnings/min-max/
http://momentjs.com/guides/#/warnings/add-inverted-param/	http://momentjs.com/guides/#/warnings/zone/
http://momentjs.com/guides/#/warnings/dst-shifted/	http://www.apache.org/licenses/LICENSE-2.0
http://jedwatson.github.io/classnames	https://feross.org/opensource
http://facebook.github.io/react/docs/error-decoder.html?invariant=	http://feross.org
https://sdk.twilio.com/js/client/sounds/releases/1.0.0	http://www.w3.org/1999/xhtml
http://www.w3.org/1998/Math/MathML	https://github.com/crypto-browserify/crypto-browserify
https://support.microsoft.com/en-us/help/4533505/what-is-microsoft-edge-legacy	https://www.twilio.com/docs/voice/client/javascript#supported-browsers
https://www.twilio.com/docs/api/client/twilio-js	https://fb.me/react-animation-transition-group-timeout
http://fb.me/use-check-prop-types	http://www.w3.org/XML/1998/namespace
https://github.com/indutny/elliptic/issues	https://github.com/indutny/elliptic
https://account.talkdeskid.com/accounts/	https://github.com/jonschlinkert/is-plain-object
https://github.com/jonschlinkert/isobject	https://github.com/Talkdesk/azores-lib.git
https://github.com/Talkdesk/azores-lib/issues	https://github.com/Talkdesk/azores-lib#readme
https://github.com/Talkdesk/google-libphonenumber.git#v3.2.24	https://github.com/Talkdesk/talkdesk-http-client-js.git#v1.1.3
https://github.com/Talkdesk/td-rtm-js.git#v3.6.0	https://api.talkdeskapp.com/
https://github.com/Talkdesk/azores-lib.git#v10.19.5	https://github.com/Talkdesk/td-auth-client-js.git#v5.0.2
https://pusher.com/	http://js.pusher.com
https://js.pusher.com	https://pusher.com
https://mths.be/punycode	https://github.com/google/closure-library/wiki/goog.module:-an-ES6-module-like-alternative-to-goog.provide.
https://sdk.split.io/api	https://events.split.io/api
https://auth.split.io/api	https://streaming.split.io
https://github.com/splitio/javascript-client#readme	https://github.com/splitio/javascript-client/issues
https://github.com/NicoZelaya	https://github.com/dcodeIO/utfx
https://bugzilla.mozilla.org/show_bug.cgi?id=1299324	https://www.twilio.com/docs/voice/client/edges.
https://github.com/facebook/regenerator/blob/main/LICENSE	https://github.com/pusher/pusher-js/tree/cc491015371a4bde5743d1c87a0fbac0feb53195#encrypted-channel-support
https://example.com	https://feross.org
https://momentjs.com/timezone/docs/#/use-it/browser/	http://momentjs.com/timezone/docs/#/data-loading/.
https://support.talkdesk.com/hc/en-us/articles/360043541671-Product-Notice-Callbar-Update-EOL-of-Chrome-Apps-by-Google	https://docs.logrocket.com/reference#network
https://cdn.logrocket.io	https://cdn.lr-in.com
https://r.lr-in.com	https://r.logrocket.io
https://r.lr-ingest.io	https://staging-i.logrocket.io
https://staging-i.lr-ingest.io	https://staging-i.lr-in.com
https://cdn.pendo.io/agent/static/f3ec577a-e10f-4b30-6dcb-6d9a8c8c09a5/pendo.js	http://daneden.me/animate
http://opensource.org/licenses/MIT	https://github.com/nickpettit/glide

Page 1 of 2

Raw Manifest

{
  "app": {
    "background": {
      "scripts": [
        "background.bundle.js"
      ]
    }
  },
  "name": "Talkdesk Callbar",
  "icons": {
    "16": "img/16.png",
    "19": "img/19.png",
    "38": "img/38.png",
    "48": "img/48.png",
    "128": "img/128.png",
    "256": "img/256.png"
  },
  "version": "1.53.6",
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Experience the Talkdesk Callbar outside of a webpage!",
  "permissions": [
    "alwaysOnTopWindows",
    "audioCapture",
    "storage",
    "notifications",
    "browser",
    "identity",
    "https://*.talkdeskid.com/*",
    "https://*.talkdeskid.eu/*",
    "https://*.talkdeskidca.com/*"
  ],
  "manifest_version": 2,
  "externally_connectable": {
    "ids": [
      "adjgicoimjhccdcjgepkmigomegpjplg"
    ],
    "matches": [
      "https://s3.amazonaws.com/td-p-azores-cti/*",
      "https://*.mytalkdesk.com/*"
    ]
  },
  "minimum_chrome_version": "51"
}

by ✦ Astarte

Talkdesk Callbar

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Embedded URLs (88 total):

Raw Manifest

Detections

Manifest Findings