[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Easy Print

Version 1.0.0.4 View in Chrome Web Store

Last scanned: about 2 hours ago

Extension Details

Rating: 1.0 ★ (4 ratings)

Users: 30,000

Context-Aware Verdict

MEDIUM

Overall Risk

Trust Factors:

The extension has a concerning trust profile with only 30,000 users and an extremely low rating of 1.0 stars from just 4 reviews, which is a significant red flag. The lack of developer information and missing description raises transparency concerns. However, the extension uses Manifest V3, which provides better security controls.

Concerns:

- Extremely poor user rating (1.0/5) suggests functionality or security issues

- Missing extension description makes it impossible to verify if permissions align with stated purpose

- No developer information provided, reducing accountability

- The search permission seems unnecessary for a basic printing utility

- CSP allows connections to multiple external domains including easyprintapp.net and printfriendly.com, which could be used for data collection

- Storage permission combined with external connections could enable tracking or data harvesting

- Low user adoption despite being a utility that should have broader appeal

Recommendations:

Given the poor ratings and lack of transparency, consider using well-established printing extensions with better reputations instead. If you must use this extension, run it in a separate Chrome profile to isolate potential risks. Monitor your browsing data and consider the extension's access to search functionality. The combination of poor reviews, missing developer info, and external connections suggests this extension may not perform as expected or could have privacy implications.

Findings

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Security Analysis Details

Required Permissions:

search
storage

Content Security Policy:

extension_pages: default-src 'self' 'unsafe-inline'; connect-src 'self' https://api.printfriendly.com https://easyprintapp.net https://www.easyprintapp.net https://safebrowsing.googleapis.com; script-src 'self'; style-src 'self' https://cdn.printfriendly.com 'unsafe-inline'; object-src 'self'; img-src 'self' https://easyprintapp.net * data:;

Embedded URLs (23 total):

https://fontawesome.com	https://fontawesome.com/license/free
https://getbootstrap.com/	https://github.com/twbs/bootstrap/blob/main/LICENSE
http://www.w3.org/2000/svg	http://fontawesome.io
http://fontawesome.io/license	https://github.com/twbs/bootstrap/graphs/contributors
https://popper.js.org	https://easyprintapp.net
https://easyprintapp.net/admin/public/image/background.jpg	https://easyprintapp.net/app/privacy.html
https://easyprintapp.net/app/eula.html	https://easyprintapp.net/app/uninstall.html
https://easyprintapp.net/app/contact.html	https://clients2.google.com/service/update2/crx
https://api.printfriendly.com	https://www.easyprintapp.net
https://safebrowsing.googleapis.com	https://cdn.printfriendly.com
https://easyprintapp.net/admin/public/print_api?page_url=	https://easyprintapp.net/admin/public/autosuggest?searchTerm=
https://easyprintapp.net/admin/public/link?q=

Raw Manifest

{
  "name": "Easy Print",
  "version": "1.0.0.4",
  "background": {
    "service_worker": "install_service.js"
  },
  "short_name": "Easy Print",
  "update_url": "https://clients2.google.com/service/update2/crx",
  "permissions": [
    "search",
    "storage"
  ],
  "manifest_version": 3,
  "chrome_url_overrides": {
    "newtab": "newtab.html"
  },
  "content_security_policy": {
    "extension_pages": "default-src 'self' 'unsafe-inline'; connect-src 'self' https://api.printfriendly.com https://easyprintapp.net https://www.easyprintapp.net https://safebrowsing.googleapis.com; script-src 'self'; style-src 'self' https://cdn.printfriendly.com 'unsafe-inline'; object-src 'self'; img-src 'self' https://easyprintapp.net * data:;"
  },
  "web_accessible_resources": [
    {
      "matches": [
        "*://*.easyprintapp.net/*"
      ],
      "resources": [
        "*.json",
        "favicon.ico"
      ]
    }
  ]
}

by ✦ Astarte