[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Partizion — Tab and Session Manager

Version 0.0.4.4 View in Chrome Web Store

Last scanned: about 19 hours ago

Extension Details

Developer: MBF Technologies

Rating: 4.2 ★ (141 ratings)

Users: 2,000

Context-Aware Verdict

HIGH

Overall Risk

Trust Factors: The extension has a moderate user base of 2,000 downloads and a decent rating of 4.2 stars from 141 reviews, suggesting some user satisfaction. However, the very low version number (0.0.4.4) indicates this is still early-stage software that may not be fully mature or thoroughly tested. The developer "MBF Technologies" lacks clear reputation indicators.

Concerns: The permission set is concerning for a tab manager. While tabs and sessions permissions are expected for this functionality, the cookies permission is questionable - tab managers typically don't need to access or modify cookies. The system.display permission also seems unnecessary for basic tab management. The host permissions are restricted to partizion.io domains, which is better than broad web access, but still allows the extension to communicate with external servers. The combination of tabs, cookies, and external communication creates potential for data collection and privacy violations.

Recommendations: Consider running this extension in a separate Chrome profile to isolate it from your main browsing data. Before installing, verify what specific features require cookie access and whether they're essential to your needs. Monitor the extension's network activity if possible. Given the early version number, wait for more mature releases unless the functionality is critical. Consider established alternatives with better security track records for tab management needs.

Findings

HIGH

Broad Host Permissions

This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.

HIGH

High-Risk Permission: cookies

This extension has the cookies permission. Can access and modify browser cookies. This could potentially be used maliciously to compromise security or privacy.

HIGH

High-Risk Permission: tabs

This extension has the tabs permission. Can access browser tab information and manipulate tabs. This could potentially be used maliciously to compromise security or privacy.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Security Analysis Details

Required Permissions:

tabs
storage
sessions
commands
cookies
system.display

Optional Permissions:

history

Host Permissions:

http://*.partizion.io/*
https://*.partizion.io/*

Embedded URLs (217 total):

http://www.w3.org/TR/2001/REC-SVG-20010904/DTD/svg10.dtd	http://www.w3.org/2000/svg
https://app.partizion.io	https://www.app.partizion.io
https://partizion-dev-web-app.onrender.com/	https://app.partizion.io/getting-started
https://app.partizion.io/ui/feedback?uuid=	https://clients2.google.com/service/update2/crx
https://www.robotstxt.org/robotstxt.html	https://www.notion.so/matthewbf/The-Session-Sync-efb58058cf0c4e84b4a6a1218ac549e9
https://www.app.partizion.io/	http://app.partizion.io
https://www.api.partizion.io/api/v1	https://partizion-test-server.onrender.com/api/v1
https://www.dev.partizion.io/	https://github.com/garycourt/murmurhash-js
https://github.com/aappleby/smhasher/blob/61a0530f28277f2e850bfc39600ce61d02b518de/src/MurmurHash2.cpp#L37-L86	https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Template_literals#ES2018_revision_of_illegal_escape_sequences
https://esbench.com/bench/5b809c2cf2949800a0f61fb5	https://www.w3.org/TR/WCAG20-TECHS/G17.html#G17-tests
https://m2.material.io/design/layout/understanding-layout.html	https://esbench.com/bench/5bfee68a4cd7e6009ef61d23
https://github.com/emotion-js/emotion/blob/16d971d0da229596d6bcc39d282ba9753c9ee7cf/packages/styled/src/base.js#L186	https://github.com/twbs/bootstrap/blob/1d6e3710dd447de1a200f29e8fa521f8a0908f70/scss/_functions.scss#L59
https://github.com/material-components/material-components-web/blob/ac46b8863c4dab9fc22c4c662dc6bd1b65dd652f/packages/mdc-theme/_functions.scss#L54	https://www.w3.org/TR/2008/REC-WCAG20-20081211/#visual-audio-contrast-contrast
https://m2.material.io/design/typography/the-type-system.html	https://m2.material.io/design/typography/understanding-typography.html
https://meyerweb.com/eric/thoughts/2006/02/08/unitless-line-heights/	https://github.com/material-components/material-components-web/blob/be8747f94574669cb5e7add1a7c54fa41a89cec7/packages/mdc-elevation/_variables.scss
https://mui.com/r/state-classes-guide	https://material.google.com/motion/duration-easing.html#duration-easing-natural-easing-curves
https://m2.material.io/guidelines/motion/duration-easing.html#duration-easing-common-durations	https://www.wolframalpha.com/input/?i=
https://github.com/emotion-js/emotion/blob/26ded6109fcd8ca9875cc2ce4564fee678a3f3c5/packages/styled/src/utils.js#L40	https://mui.com/material-ui/customization/palette/#adding-new-colors
https://developer.mozilla.org/en-US/docs/Web/SVG/Attribute/shape-rendering	https://www.w3.org/TR/SVG-access/#Equivalent
https://github.com/mui/material-ui/issues/30011#issuecomment-1024993401	https://mui.com/guides/classname-generator/
https://fb.me/react-controlled-components	https://github.com/WICG/focus-visible/blob/v4.1.5/src/focus-visible.js
https://github.com/facebook/react/issues/3751	https://github.com/facebook/react/pull/19186
https://github.com/microsoft/TypeScript/pull/12253#issuecomment-263132208	https://babeljs.io/docs/en/babel-plugin-transform-template-literals#loose
https://mui.com/production-error/?code=	https://github.com/mui/material-ui/issues/13539
https://github.com/facebook/react/issues/14099#issuecomment-440013892	https://en.wikipedia.org/wiki/Birthday_problem
https://github.com/webpack/webpack/issues/14814	http://www.google.com
http://url.spec.whatwg.org/#urlutils	https://nodejs.org/api/http.html#http_message_headers
http://jedwatson.github.io/classnames	https://github.com/davidchambers/Base64.js
https://bugs.chromium.org/p/v8/issues/detail?id=4118	https://bugs.chromium.org/p/v8/issues/detail?id=3056
http://fb.me/use-check-prop-types	http://fb.me/prop-types-in-prod
https://reactjs.org/docs/error-decoder.html?invariant=	http://www.w3.org/1999/xlink
http://www.w3.org/XML/1998/namespace	http://www.w3.org/1999/xhtml
http://www.w3.org/1998/Math/MathML	https://reactjs.org/link/react-polyfills
https://www.mail.google.com/inbox/john	https://github.githubassets.com/favicon.ico
https://www.github.com	https://www.asana.com/
https://static.npmjs.com/b0f1a8318363185cc2ea6a40ac23eeb2.png	https://github.com/Modernizr/Modernizr/blob/master/LICENSE
https://github.com/Modernizr/Modernizr/blob/master/feature-detects/history.js	https://github.com/reactjs/react-router/issues/586
https://github.com/ReactTraining/history/pull/289	https://github.com/pillarjs/path-to-regexp/blob/master/index.js#L202
https://github.com/facebook/regenerator/blob/main/LICENSE	https://mui.com/base/react-portal/
https://mui.com/base/api/portal/	https://github.com/twbs/bootstrap/blob/488fd8afc535ca3a6ad4dc581f5e89217b6a36ac/js/src/util/scrollbar.js#L14-L18

Page 1 of 3

Raw Manifest

{
  "name": "Partizion — Tab and Session Manager",
  "icons": {
    "16": "16-circle.png",
    "48": "48-circle.png",
    "128": "128-circle.png"
  },
  "action": {
    "default_icon": "128-circle.png",
    "default_popup": "index.html",
    "default_title": "Save to Partizion"
  },
  "author": "Partizion",
  "version": "0.0.4.4",
  "commands": {
    "_execute_action": {
      "suggested_key": {
        "mac": "Command+Shift+L",
        "default": "Ctrl+Shift+L"
      }
    },
    "open-partizion-search": {
      "description": "Open Partizion Search",
      "suggested_key": {
        "mac": "Command+Shift+K",
        "linux": "Ctrl+Shift+K",
        "default": "Ctrl+Shift+K"
      }
    },
    "save-and-close-session": {
      "description": "Save and Close Session",
      "suggested_key": {
        "mac": "Command+Shift+Period",
        "linux": "Ctrl+Shift+Period",
        "default": "Ctrl+Shift+Period"
      }
    },
    "open-partizion-dashboard": {
      "description": "Open Partizion Dashboard",
      "suggested_key": {
        "mac": "Command+Shift+O",
        "linux": "Ctrl+Shift+O",
        "default": "Ctrl+Shift+O"
      }
    }
  },
  "background": {
    "type": "module",
    "service_worker": "background.js"
  },
  "short_name": "Partizion",
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Tab & Session manager — ✨ Auto-updating tab collections, ☁️ Cloud synced sessions.",
  "permissions": [
    "tabs",
    "storage",
    "sessions",
    "commands",
    "cookies",
    "system.display"
  ],
  "host_permissions": [
    "http://*.partizion.io/*",
    "https://*.partizion.io/*"
  ],
  "manifest_version": 3,
  "optional_permissions": [
    "history"
  ],
  "externally_connectable": {
    "matches": [
      "*://*.partizion.io/*",
      "http://localhost:3001/*"
    ]
  }
}

by ✦ Astarte

Partizion — Tab and Session Manager

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Optional Permissions:

Host Permissions:

Embedded URLs (217 total):

Raw Manifest

Detections

Manifest Findings