[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Netflix Subtitles & Dictionary

Version 4.26.07.15 View in Chrome Web Store

Last scanned: about 22 hours ago

Extension Details

Developer: appforlanguage.com

Rating: 3.7 ★ (7 ratings)

Users: 8,000

Context-Aware Verdict

MEDIUM

Overall Risk

Based on 3 total findings, including 1 high-risk finding.

Findings

HIGH

Broad Host Permissions

This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.

MEDIUM

Access to Sensitive Domains

This extension requests access to sensitive domains: https://clients5.google.com/*. Ensure you trust this extension with access to these sites.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Security Analysis Details

Required Permissions:

storage
tts

Optional Permissions:

activeTab

Host Permissions:

https://appforlanguage.com/*
https://clients5.google.com/*
*://netflix.com/*

Content Security Policy:

extension_pages: script-src 'self'; object-src 'self'

Embedded URLs (236 total):

https://bugs.webkit.org/show_bug.cgi?id=68196	https://mui.com/production-error/?code=
https://appforlanguage.com/	https://www.youtube.com/watch?v=62qFMvSd45g
https://www.youtube.com/watch?v=-nEO2Y8Biw8	https://www.youtube.com/watch?v=BFYVan-hBpU
https://www.youtube.com/watch?v=loF4fYLVocM	https://extension.appforlanguage.com/dual-subtitles-guide/
https://www.youtube.com/watch?v=vgNYdQwSj88	https://www.youtube.com/watch?v=3v1Xv5dxGWE
https://www.youtube.com/watch?v=uA8YNZ2t51c	https://extension.appforlanguage.com/language-learning-keyboard-shortcuts/
https://www.youtube.com/watch?v=ejnrbtnpr2s&feature=youtu.be	https://extension.appforlanguage.com/save-words-and-sentences-subtitles/
https://extension.appforlanguage.com/download-saved-items-language-learning/	https://youtu.be/8pSQ5fZwFsM
https://extension.appforlanguage.com/download-subtitles-for-language-learning/	https://www.youtube.com/watch?v=o4YHkPOXf2o
https://extension.appforlanguage.com/fluency-gym-language-learning/	https://www.youtube.com/watch?v=7wysf-kbptM
https://extension.appforlanguage.com/mind-map-vocabulary-learning/	https://www.youtube.com/watch?v=T_P4-klAu08
https://extension.appforlanguage.com/ai-language-learning-package-netflix-youtube/	https://appforlanguage.com
https://chromewebstore.google.com/detail/language-learning-with-di/liencdcnkiopkjihmekmlnjkcajjppnf	https://www.netflix.com/DoNotTest
https://words.appforlanguage.com/	https://mail.google.com/mail/?view=cm&fs=1&to=welcome@appforlanguage.com
https://docs.google.com/forms/d/e/1FAIpQLScf7T_M46CIzwJ2KUtFF5PMFZJOBJEUVuednyrYz7l3I9RU7w/viewform	https://m.appforlanguage.com/whisper/counter/add
https://t4.appforlanguage.com/tutorials	https://appforlanguage.com/loading
https://appforlanguage.com/premium/growth-with-ai	https://appforlanguage.com/premium/netflix
https://appforlanguage.com/cancelStripePage	https://appforlanguage.com/payment/stripe/customer/customer-portal-session
https://auth.appforlanguage.com/change-password	https://auth.appforlanguage.com/password-reset
https://appforlanguage.com/payment-gateway/v2/growth-with-ai?app=N	https://appforlanguage.com/payment-gateway/auth/redirect-auth?page=growth-with-ai
https://auth.appforlanguage.com/token/refresh	https://auth.appforlanguage.com/client/auth-events
https://auth.appforlanguage.com/login-register	https://extension.appforlanguage.com/cbxchangelog/app-for-language-learning-netflix-youtube-updates/
https://t4.appforlanguage.com/segmentation2	https://test2.appforlanguage.com/extractionsub
https://appforlanguage.com/extractionsub	https://t4.appforlanguage.com/sub_export
https://t4.appforlanguage.com/subsget/v1/subtitle-ingestions	https://t4.appforlanguage.com/subsget/v1/subtitles
https://t4.appforlanguage.com/synchronization	https://t4.appforlanguage.com/phonetics_nf
https://t4.appforlanguage.com/only_merge	https://t4.appforlanguage.com/YouTube_segmentation
https://d1.appforlanguage.com/ytID	https://words.appforlanguage.com/word/search?sort_by_creation_date=DSC
https://flashcard.funfluen.com/api/flashcard?skip=0&sort_by=created&sort_order=desc	https://roadmap.funfluen.com/extract-vocab
https://roadmap.funfluen.com/user/register	https://words.appforlanguage.com/word/save
https://affiliate.funfluen.com/referral/users/referral-code	https://affiliate.funfluen.com/referral/users/referrals
https://affiliate.funfluen.com/referral/users/	https://words.appforlanguage.com/ai_movie_chat_bot
https://img.youtube.com/vi/	https://www.youtube.com/embed/
https://flashcard.funfluen.com/api/flashcard/	https://roadmap.funfluen.com/word/
https://flashcard.funfluen.com/api/flashcard	https://words.appforlanguage.com/word/delete/
https://words.appforlanguage.com/word/update/	https://t4.appforlanguage.com/subs/available_languages/
https://t4.appforlanguage.com/subs/get_subtitle/	https://d.appforlanguage.com/translations?from=
https://d.appforlanguage.com/minified-dict?word=	https://d.appforlanguage.com/de_dict/de_dictionary?word=
https://roadmap.funfluen.com/ai-vocab/	https://roadmap.funfluen.com/ai-vocab/?movie_id=
https://extension.appforlanguage.com/	https://clients5.google.com/translate_a/t?q=

Page 1 of 3

Raw Manifest

{
  "name": "__MSG_appName__",
  "icons": {
    "16": "images/icon_16.png",
    "48": "images/icon_48.png",
    "128": "images/icon_128.png",
    "240": "images/icon_240.png"
  },
  "action": {
    "default_icon": {
      "16": "images/icon_16.png",
      "48": "images/icon_48.png",
      "128": "images/icon_128.png",
      "240": "images/icon_240.png"
    },
    "default_popup": "popupPage/popup.html",
    "default_title": "Language Learning with Netflix™"
  },
  "version": "4.26.07.15",
  "background": {
    "service_worker": "backgroundscript.js"
  },
  "tts_engine": {
    "voices": [
      {
        "voice_name": "Alice",
        "event_types": [
          "start",
          "marker",
          "end"
        ]
      }
    ]
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "__MSG_appDesc__",
  "permissions": [
    "storage",
    "tts"
  ],
  "default_locale": "en",
  "content_scripts": [
    {
      "js": [
        "netflix/contentscript.js"
      ],
      "css": [
        "netflix/styles.css"
      ],
      "run_at": "document_start",
      "matches": [
        "http://www.netflix.com/*",
        "https://www.netflix.com/*"
      ],
      "all_frames": false
    },
    {
      "js": [
        "appforlanguage/contentscript.js"
      ],
      "matches": [
        "https://appforlanguage.com/payment-gateway/auth*",
        "http://appforlanguage.com/payment-gateway/auth*"
      ]
    },
    {
      "js": [
        "payment/contentscript.js"
      ],
      "matches": [
        "https://appforlanguage.com/loading/",
        "https://appforlanguage.com/loading",
        "http://www.appforlanguage.com/loading"
      ]
    },
    {
      "js": [
        "paymentpage/contentscript.js"
      ],
      "matches": [
        "https://appforlanguage.com/payment-gateway/success*",
        "http://appforlanguage.com/payment-gateway/success*"
      ]
    },
    {
      "js": [
        "cancelpage/contentscript.js"
      ],
      "matches": [
        "https://appforlanguage.com/cancel",
        "https://appforlanguage.com/cancel/",
        "http://www.appforlanguage.com/cancel"
      ]
    },
    {
      "js": [
        "cancelStripePage/contentscript.js"
      ],
      "matches": [
        "https://appforlanguage.com/cancelStripePage",
        "https://appforlanguage.com/cancelStripePage/",
        "http://www.appforlanguage.com/cancelStripePage"
      ]
    },
    {
      "js": [
        "packages/contentscript.js"
      ],
      "matches": [
        "https://appforlanguage.com/payment-gateway/v2/growth-with-ai*",
        "https://appforlanguage.com/payment-gateway/v2/growth-with-ai/*",
        "http://www.appforlanguage.com/payment-gateway/v2/growth-with-ai*"
      ]
    }
  ],
  "host_permissions": [
    "https://appforlanguage.com/*",
    "https://clients5.google.com/*",
    "*://netflix.com/*"
  ],
  "manifest_version": 3,
  "optional_permissions": [
    "activeTab"
  ],
  "content_security_policy": {
    "extension_pages": "script-src 'self'; object-src 'self'"
  },
  "web_accessible_resources": [
    {
      "matches": [
        "*://*/*"
      ],
      "resources": [
        "*.*"
      ]
    }
  ],
  "optional_host_permissions": [
    "https://words.appforlanguage.com/*"
  ]
}

by ✦ Astarte

Netflix Subtitles & Dictionary

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Optional Permissions:

Host Permissions:

Content Security Policy:

Embedded URLs (236 total):

Raw Manifest

Detections

Manifest Findings