[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

DigitalSignage 365

Version 1.0.4 View in Chrome Web Store

Last scanned: about 5 hours ago

Extension Details

Rating: 3.0 ★ (9 ratings)

Context-Aware Verdict

MEDIUM

Overall Risk

Based on 4 total findings, including 1 high-risk finding.

Findings

HIGH

High-Risk Permission: tabs

This extension has the tabs permission. Can access browser tab information and manipulate tabs. This could potentially be used maliciously to compromise security or privacy.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

MEDIUM

Medium-Risk Permission: webview

This extension has the webview permission. Can embed web content in the extension.

MEDIUM

Older Manifest Version

This extension uses Manifest Version 2, which has fewer security restrictions than Manifest V3. Consider using extensions that have upgraded to V3.

Raw Manifest

{
  "app": {
    "background": {
      "scripts": [
        "background.js",
        "jquery.js"
      ]
    }
  },
  "name": "DigitalSignage 365",
  "icons": {
    "16": "Digital Signage 365 icon_16 x 16 .png",
    "48": "Digital Signage 365 icon_48 x 48.png",
    "128": "Digital Signage 365 icon_128 x128.png"
  },
  "version": "1.0.4",
  "short_name": "DigitalSignage 365",
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "A web based digital signage solution for restaurants, schools, internal communications and retail.",
  "permissions": [
    "tabs",
    "browser",
    "storage",
    "videoCapture",
    "webview",
    "audio",
    "audioCapture",
    "desktopCapture",
    "http://*/*",
    "https://*/*",
    "fullscreen",
    "overrideEscFullscreen"
  ],
  "manifest_version": 2,
  "externally_connectable": {
    "matches": [
      "*://voip.imeeting365.com/*",
      "*://DigitalSignage365.com/*"
    ]
  },
  "minimum_chrome_version": "38"
}

by ✦ Astarte

DigitalSignage 365

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Embedded URLs (3 total):

Raw Manifest

Detections

Manifest Findings

http://DigitalSignage365.com/DeviceManager/DSClientStatus/	http://DigitalSignage365.com//DeviceManager/DSClientPost
https://clients2.google.com/service/update2/crx