[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Bookmark Manager

Version 3.0.0 View in Chrome Web Store

Last scanned: about 5 hours ago

Extension Details

Developer: https://bookmark-manager.freebusinessapps.net/

Rating: 3.6 ★ (39 ratings)

Users: 10,000

Context-Aware Verdict

MEDIUM

Overall Risk

Based on 1 total findings, including 1 high-risk finding.

Findings

HIGH

High-Risk Permission: bookmarks

This extension has the bookmarks permission. Can access and modify bookmarks. This could potentially be used maliciously to compromise security or privacy.

Security Analysis Details

Required Permissions:

bookmarks

Embedded URLs (73 total):

https://jquery.com/	https://sizzlejs.com/
https://jquery.org/license	https://github.com/eslint/eslint/issues/6125
http://jquery.org/license	https://jsperf.com/thor-indexof-vs-for/5
http://www.w3.org/TR/css3-selectors/#whitespace	http://www.w3.org/TR/CSS21/syndata.html#value-def-identifier
http://www.w3.org/TR/selectors/#attribute-selectors	http://www.w3.org/TR/CSS21/syndata.html#escaped-characters
https://drafts.csswg.org/cssom/#common-serializing-idioms	https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled
https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled	https://html.spec.whatwg.org/multipage/forms.html#category-listed
https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled	https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled
https://bugs.jquery.com/ticket/13378	https://bugs.jquery.com/ticket/12359
https://msdn.microsoft.com/en-us/library/ie/hh465388.aspx#attribute_section	http://www.w3.org/TR/2011/REC-css3-selectors-20110929/#checked
https://bugs.webkit.org/show_bug.cgi?id=136851	https://github.com/jquery/sizzle/pull/225
http://www.w3.org/TR/selectors/#pseudo-classes	http://www.w3.org/TR/selectors/#lang-pseudo
http://www.w3.org/TR/selectors/#empty-pseudo	https://msdn.microsoft.com/en-us/library/ms536429%28VS.85%29.aspx
https://promisesaplus.com/#point-59	https://promisesaplus.com/#point-48
https://promisesaplus.com/#point-54	https://promisesaplus.com/#point-75
https://promisesaplus.com/#point-64	https://promisesaplus.com/#point-61
https://promisesaplus.com/#point-57	https://bugs.chromium.org/p/chromium/issues/detail?id=378607
https://www.w3.org/TR/DOM-Level-3-Events/#event-type-click	https://www.w3.org/TR/2003/WD-DOM-Level-3-Events-20030331/ecma-script-binding.html
https://bugs.chromium.org/p/chromium/issues/detail?id=470258	https://github.com/eslint/eslint/issues/3229
https://connect.microsoft.com/IE/feedback/details/1736512/	https://jsperf.com/getall-vs-sizzle/2
https://drafts.csswg.org/cssom/#resolved-values	https://developer.mozilla.org/en-US/docs/CSS/display
https://bugzilla.mozilla.org/show_bug.cgi?id=649285	https://bugzilla.mozilla.org/show_bug.cgi?id=491668
https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/	https://html.spec.whatwg.org/multipage/syntax.html#attributes-2
https://web.archive.org/web/20141116233347/http://fluidproject.org/blog/2008/01/09/getting-setting-and-removing-tabindex-values-with-javascript/	https://html.spec.whatwg.org/multipage/infrastructure.html#strip-and-collapse-whitespace
https://html.spec.whatwg.org/#strip-and-collapse-whitespace	https://bugzilla.mozilla.org/show_bug.cgi?id=687787
http://www.w3.org/TR/DOM-Level-3-Events/#events-focusevent-event-order	https://bugs.chromium.org/p/chromium/issues/detail?id=449857
http://example.com:80x/	https://bugs.webkit.org/show_bug.cgi?id=137337
https://bugs.webkit.org/show_bug.cgi?id=29084	https://bugs.chromium.org/p/chromium/issues/detail?id=589347
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon	https://github.com/jquery/jquery/pull/557
http://jstree.com/	http://vakata.com
http://www.opensource.org/licenses/mit-license.php	http://caniuse.com/#feat=dragndrop
http://kiro.me/projects/fuse.html	http://www.w3.org/2000/svg
https://chrome.google.com/webstore/detail/	https://microsoftedge.microsoft.com/addons/detail/
https://clients2.google.com/service/update2/crx	https://bookmark-manager.freebusinessapps.net
http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd	http://www.w3.org/1999/xhtml
https://maxcdn.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css	https://getbootstrap.com/
https://github.com/twbs/bootstrap/blob/master/LICENSE

Raw Manifest

{
  "name": "__MSG_application_title__",
  "icons": {
    "16": "icon/16.png",
    "32": "icon/32.png",
    "48": "icon/48.png",
    "128": "icon/128.png",
    "256": "icon/256.png"
  },
  "action": {
    "theme_icons": [
      {
        "size": 16,
        "light": "icon/16.png"
      },
      {
        "size": 32,
        "light": "icon/32.png"
      },
      {
        "size": 48,
        "light": "icon/48.png"
      },
      {
        "size": 64,
        "light": "icon/64.png"
      }
    ],
    "browser_style": true,
    "default_popup": "popup.html"
  },
  "version": "3.0.0",
  "container": [
    "GOOGLE_DRIVE"
  ],
  "background": {
    "service_worker": "/js/welcome.js"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "__MSG_application_description__",
  "permissions": [
    "bookmarks"
  ],
  "homepage_url": "https://bookmark-manager.freebusinessapps.net",
  "default_locale": "en",
  "offline_enabled": true,
  "manifest_version": 3,
  "web_accessible_resources": [
    {
      "matches": [
        "<all_urls>"
      ],
      "resources": [
        "favicon.ico"
      ]
    }
  ]
}

by ✦ Astarte