[ new scan ] [ statistics ] [ github ] [ twitter ]

Form History Control (II)

Version 3.0.3.0 View in Chrome Web Store

Last scanned: 19 days ago | force re-scan

Extension Details

Rating: 4.1 ★ (28 ratings)

Size: 594KiB

Last Updated: April 28, 2025

Users: 5,000

Context-Aware Verdict

HIGH

Risk Level

Trust Factors:

- The extension has a relatively high number of users (5,000), which could indicate some level of trust.

- However, there is no information provided about the developer or company behind the extension, which reduces trust.

Concerns:

- The extension requests several high-risk permissions, including tabs, clipboardWrite, and broad host permissions to access all websites.

- These permissions could potentially be abused to compromise security and privacy, such as stealing sensitive data, modifying website content, or tracking browsing activity.

- The broad content script injection capability is also a significant concern, as it allows the extension to inject scripts into any website, potentially reading sensitive data or stealing credentials.

Recommendations:

- Exercise caution when installing this extension, as it poses a high risk to your security and privacy due to its broad permissions and capabilities.

- If you decide to use this extension, consider running it in a separate Chrome profile or a sandboxed environment to isolate it from your main browsing activities.

- Regularly review the extension's permissions and activities, and uninstall it if you notice any suspicious behavior.

- Consider using alternative extensions with more limited permissions or from reputable developers if they can fulfill the same functionality.

Security Analysis

CRITICAL

Overall Risk

Based on 7 total findings, ranked without considering overall context, including 4 high-risk and 3 medium-risk findings.

HIGH

Broad Content Script Injection

This extension can inject scripts into any website. This means it could potentially read sensitive data, modify website content, or steal credentials.

HIGH

Broad Host Permissions

This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.

HIGH

High-Risk Permission: clipboardWrite

This extension has the clipboardWrite permission. Can modify clipboard content. This could potentially be used maliciously to compromise security or privacy.

HIGH

High-Risk Permission: tabs

This extension has the tabs permission. Can access browser tab information and manipulate tabs. This could potentially be used maliciously to compromise security or privacy.

MEDIUM

Medium-Risk Permission: activeTab

This extension has the activeTab permission. Can access the active tab when clicking the extension icon.

MEDIUM

Medium-Risk Permission: contextMenus

This extension has the contextMenus permission. Can add items to the context menu.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Security Analysis Details

Required Permissions:

contextMenus
activeTab
tabs
storage
alarms
clipboardWrite

Optional Permissions:

downloads

Host Permissions:

*://*/*
file:///*

Embedded URLs (51 total):

https://clients2.google.com/service/update2/crx	https://github.com/mozilla/webextension-polyfill
http://mozilla.org/MPL/2.0/.	https://github.com/mozilla/webextension-polyfill/issues/130
http://www.w3.org/TR/xmlschema-2/#dateTime	https://developer.mozilla.org/en-US/docs/Web/API/Node/nodeType
http://w3c.github.io/webcomponents/spec/custom/#creating-and-passing-registries	http://www.w3.org/1998/Math/MathML
http://www.w3.org/2000/svg	http://www.w3.org/1999/xhtml
https://www.w3.org/TR/xhtml1/normative.html#strict	https://html.spec.whatwg.org/multipage/dom.html#embedding-custom-non-visible-data-with-the-data-
https://html.spec.whatwg.org/multipage/infrastructure.html#xml-compatible	http://www.w3.org/TR/xml/#d0e804
https://github.com/sindresorhus/validate-element-name	https://stephanmahieu.github.io/fhc-home/
https://stephanmahieu.github.io/fhc-home/ReleaseNotes/fhc-releasenotes/	https://bugzilla.mozilla.org/show_bug.cgi?id=1271047
https://github.com/stephanmahieu/JavaScript-autoComplete	https://github.com/Pixabay/JavaScript-autoComplete
http://www.opensource.org/licenses/mit-license.php	http://www.iport.it
https://github.com/markedjs/marked	https://tools.ietf.org/html/rfc3986#section-3
https://marked.js.org/#/USING_ADVANCED.md#options	https://stackoverflow.com/a/5450113/806777
https://github.com/markedjs/marked.	http://www.youtube.com/embed/
http://local.import	http://www.eslinstructor.net/vkbeautify/
https://datatables.net/download	https://datatables.net/download/#dt/dt-2.2.2/b-3.2.2/b-colvis-3.2.2/r-3.0.4/sl-3.0.0
https://datatables.net/tn/	https://datatables.net/tn/17
http://datatables.net/license/mit	http://www.datatables.net
http://stackoverflow.com/questions/8898412	https://jsperf.com/childnodes-array-slice-vs-loop
http://www.inkscape.org/	http://purl.org/dc/elements/1.1/
http://creativecommons.org/ns#	http://www.w3.org/1999/02/22-rdf-syntax-ns#
http://www.w3.org/1999/xlink	http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd
http://www.inkscape.org/namespaces/inkscape	http://purl.org/dc/dcmitype/StillImage
http://creativecommons.org/licenses/publicdomain/	http://creativecommons.org/ns#Reproduction
http://creativecommons.org/ns#Distribution	http://creativecommons.org/ns#DerivativeWorks
http://creativecommons.org/publicdomain/zero/1.0/

Raw Manifest

{
  "name": "__MSG_extensionName__",
  "icons": {
    "16": "theme/icons/fhc-16.png",
    "32": "theme/icons/fhc-32.png",
    "48": "theme/icons/fhc-48.png",
    "64": "theme/icons/fhc-64.png",
    "128": "theme/icons/fhc-128.png"
  },
  "action": {
    "default_icon": "theme/icons/fhc-128.png",
    "default_popup": "popup/tableview/popup-small.html",
    "default_title": "__MSG_extensionName__"
  },
  "author": "Stephan Mahieu",
  "version": "3.0.3.0",
  "commands": {
    "open_fhc": {
      "description": "Open the main FHC dialog",
      "suggested_key": {
        "default": "Alt+Shift+F"
      }
    },
    "fill_often": {
      "description": "Fill fields with most often used entries",
      "suggested_key": {
        "default": "Alt+Shift+O"
      }
    },
    "fill_recent": {
      "description": "Fill fields with most recent used entries",
      "suggested_key": {
        "default": "Alt+Shift+R"
      }
    },
    "toggle_display_fields": {
      "description": "Show/hide formfields on the current page",
      "suggested_key": {
        "default": "Alt+Shift+D"
      }
    }
  },
  "background": {
    "service_worker": "/background/chrome-service-worker.js"
  },
  "options_ui": {
    "page": "popup/options/options.html",
    "open_in_tab": true
  },
  "short_name": "FormHistCtrl",
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "__MSG_extensionDescription__",
  "permissions": [
    "contextMenus",
    "activeTab",
    "tabs",
    "storage",
    "alarms",
    "clipboardWrite"
  ],
  "default_locale": "en",
  "content_scripts": [
    {
      "js": [
        "common/browser-polyfill.min.js",
        "common/purify.js",
        "content/collectFormData.js",
        "content/showFormData.js",
        "content/auto-complete.js",
        "content/add-auto-complete.js"
      ],
      "css": [
        "content/auto-complete.css"
      ],
      "run_at": "document_end",
      "matches": [
        "*://*/*",
        "file:///*"
      ],
      "all_frames": true
    }
  ],
  "host_permissions": [
    "*://*/*",
    "file:///*"
  ],
  "manifest_version": 3,
  "optional_permissions": [
    "downloads"
  ]
}

Form History Control (II)

Extension Details

Context-Aware Verdict

Security Analysis

Security Analysis Details

Required Permissions:

Optional Permissions:

Host Permissions:

Embedded URLs (51 total):

Raw Manifest

Secure Annex (beta)