[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

NFL Live Scores

Version 1.2.1 View in Chrome Web Store

Last scanned: about 8 hours ago

Extension Details

Rating: 5.0 ★ (3 ratings)

Users: 1,000

Context-Aware Verdict

MEDIUM

Overall Risk

Based on 2 total findings, including 1 high-risk finding.

Findings

HIGH

Broad Host Permissions

This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Security Analysis Details

Required Permissions:

storage

Host Permissions:

https://site.api.espn.com/*

Content Security Policy:

extension_pages: default-src 'self'; style-src 'self'; font-src 'self'; img-src 'self'; connect-src https://site.api.espn.com

Embedded URLs (28 total):

http://www.nfl.com/help/terms	https://disneytermsofuse.com/english/
https://fontawesome.com/license/free	https://fontawesome.com/license
https://www.flaticon.com/authors/smashicons	https://file000.flaticon.com/downloads/license/license.pdf
http://semver.org/	https://en.wikipedia.org/wiki/ISO_8601
http://www.w3.org/2000/svg	http://www.w3.org/1999/xlink
http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd	http://www.w3.org/1999/02/22-rdf-syntax-ns#
http://creativecommons.org/ns#	http://purl.org/dc/elements/1.1/
http://www.inkscape.org/namespaces/inkscape	http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd
http://www.apache.org/licenses/	http://www.apache.org/licenses/LICENSE-2.0
https://clients2.google.com/service/update2/crx	https://site.api.espn.com
https://site.api.espn.com/	https://paypal.me/blairsille
https://site.api.espn.com/apis/site/v2/sports/football/nfl/scoreboard	https://www.nfl.com/games/
https://www.espn.com.au/nfl/game/_/gameId/	https://www.nfl.com/teams/
https://www.espn.com.au/nfl/team/_/name/	https://app.whirr.co/p/cme1brb440513k907x2a7h21o

Raw Manifest

{
  "name": "NFL Live Scores",
  "icons": {
    "16": "/images/16.png",
    "48": "/images/48.png",
    "128": "/images/128.png"
  },
  "action": {
    "default_icon": {
      "16": "/images/16.png",
      "48": "/images/48.png",
      "128": "/images/128.png"
    },
    "default_popup": "popup.html",
    "default_title": "Live Scores"
  },
  "author": "Soulhawke",
  "version": "1.2.1",
  "background": {
    "service_worker": "/scripts/worker.js"
  },
  "short_name": "NFL LS",
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Delivering lightweight, live scoring for the NFL.",
  "permissions": [
    "storage"
  ],
  "options_page": "options.html",
  "host_permissions": [
    "https://site.api.espn.com/*"
  ],
  "manifest_version": 3,
  "content_security_policy": {
    "extension_pages": "default-src 'self'; style-src 'self'; font-src 'self'; img-src 'self'; connect-src https://site.api.espn.com"
  }
}

by ✦ Astarte