Extension Details
Context-Aware Verdict
The extension has a moderate user base of 10,000 users and a solid 4.6-star rating from 22 reviews, which suggests basic user satisfaction. However, the limited number of reviews relative to the user count raises some questions about engagement. The developer domain "onlinesafetyapp.net" appears purpose-built for this extension, but lacks established company credentials or transparency about the organization behind it.
The most significant concern is the broad host permissions (<all_urls>) combined with declarativeNetRequest capabilities, which grants the extension extensive access to monitor and potentially modify web traffic across all websites. For an extension claiming to provide "Online Safety," the vague description provides no clear explanation of what specific safety features it offers or why such broad permissions are necessary. The contextMenus permission, while less concerning, adds another layer of browser integration without clear justification.
Given the high-risk permission combination and lack of transparency about functionality, consider running this extension in a separate Chrome profile if you choose to use it. Before installation, research the developer's website and privacy policy thoroughly. Look for alternative safety extensions from more established security companies that provide clearer feature descriptions and more limited permissions. Monitor your browsing behavior for any unexpected changes if you decide to proceed with installation.
Findings
Security Analysis Details
Required Permissions:
- contextMenus
- declarativeNetRequest
Host Permissions:
- <all_urls>
Content Security Policy:
- extension_pages: script-src 'self'; object-src 'self'
Embedded URLs (8 total):
| http://www.w3.org/2000/svg | https://clients2.google.com/service/update2/crx | |
| https://www.onlinesafetysearch.net/favicon.ico | https://www.onlinesafetysearch.net/search/?category=web&s=sdpr&vert=private&q= | |
| https://sug.onlinesafetysearch.net/v1/sug/?yid=sdpr&vert=private&q= | https://www.onlinesafetysearch.net/wim/gotohub?s=sdpr | |
| https://fonts.googleapis.com/css2?family=Poppins:wght@300 | https://fonts.googleapis.com/css2?family=Quicksand:wght@400 |
Raw Manifest
{ "name": "Online Safety", "icons": { "16": "img/icon16.png", "48": "img/icon48.png", "128": "img/icon128.png" }, "action": { "default_icon": "img/icon16.png", "default_popup": "popup/popup.html", "default_title": "Online Safety" }, "version": "3.0.9", "incognito": "spanning", "background": { "type": "module", "service_worker": "bg/background.js" }, "update_url": "https://clients2.google.com/service/update2/crx", "description": "Default search extension that provides results of websites safety checks within your search bar.", "permissions": [ "contextMenus", "declarativeNetRequest" ], "homepage_url": "https://www.onlinesafetysearch.net/wim/gotohub?s=sdpr", "host_permissions": [ "<all_urls>" ], "manifest_version": 3, "content_security_policy": { "extension_pages": "script-src 'self'; object-src 'self'" }, "declarative_net_request": { "rule_resources": [ { "id": "rules", "path": "src/rules.json", "enabled": true } ] }, "web_accessible_resources": [ { "matches": [ "<all_urls>" ], "resources": [ "/img/icon16.png" ] } ], "chrome_settings_overrides": { "search_provider": { "name": "Online Safety", "keyword": "Online Safety", "encoding": "UTF-8", "is_default": true, "search_url": "https://www.onlinesafetysearch.net/search/?category=web&s=sdpr&vert=private&q={searchTerms}", "favicon_url": "https://www.onlinesafetysearch.net/favicon.ico", "suggest_url": "https://sug.onlinesafetysearch.net/v1/sug/?yid=sdpr&vert=private&q={searchTerms}" } } }
ⓘ CRXaminer has partnered with our friends at Secure Annex to provide additional findings unique to their platform.
Secure Annex also analyzes extensions from other browsers, IDEs, and can continuously monitor.
This extension may not yet be analyzed by Secure Annex.