[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Heptabase Web Clipper

Version 1.5.0 View in Chrome Web Store

Last scanned: about 3 hours ago

Extension Details

Developer: Hepta Platforms, Inc

Rating: 3.3 ★ (40 ratings)

Users: 10,000

Context-Aware Verdict

MEDIUM

Overall Risk

Based on 3 total findings, including 1 high-risk finding.

Findings

HIGH

Broad Host Permissions

This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.

MEDIUM

Medium-Risk Permission: activeTab

This extension has the activeTab permission. Can access the active tab when clicking the extension icon.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Security Analysis Details

Required Permissions:

activeTab
scripting
storage

Host Permissions:

https://*.heptabase.com/
http://localhost/

Embedded URLs (40 total):

https://github.com/rsms/inter/releases/tag/v3.19	https://tailwindcss.com
https://github.com/mozdevs/cssremedy/issues/4	https://github.com/tailwindcss/tailwindcss/pull/116
https://bugzilla.mozilla.org/show_bug.cgi?id=190655	https://bugs.chromium.org/p/chromium/issues/detail?id=999088
https://bugs.webkit.org/show_bug.cgi?id=201297	https://bugs.chromium.org/p/chromium/issues/detail?id=935729
https://bugs.webkit.org/show_bug.cgi?id=195016	https://github.com/mozilla/gecko-dev/blob/2f9eacd9d3d995c937b4251a5557d95d494c9be1/layout/style/res/forms.css#L728-L737
https://github.com/tailwindlabs/tailwindcss/issues/3300	https://github.com/mozdevs/cssremedy/issues/14
https://github.com/jensimmons/cssremedy/issues/14#issuecomment-634934210	http://jedwatson.github.io/classnames
https://github.com/emn178/js-sha256	https://api.heptabase.com
https://app.heptabase.com	https://api-test.heptabase.com
https://test.heptabase.com	https://www.datadoghq-browser-agent.com
https://www.datad0g-browser-agent.com	https://d3uc069fcn7uxw.cloudfront.net
https://d20xtzwzcl0ceb.cloudfront.net	https://docs.datadoghq.com/getting_started/site/
https://docs.datadoghq.com/real_user_monitoring/browser/troubleshooting/#customer-data-exceeds-the-recommended-threshold-warning	https://reactjs.org/docs/error-decoder.html?invariant=
http://www.w3.org/1999/xlink	http://www.w3.org/XML/1998/namespace
http://www.w3.org/2000/svg	http://www.w3.org/1998/Math/MathML
http://www.w3.org/1999/xhtml	https://prodregistryv2.org/v1/rgstr_e
https://featureassets.org/v1/	https://prodregistryv2.org/v1/
https://github.com/uuidjs/uuid#getrandomvalues-not-supported	https://prosemirror.net/docs/guide/#generatable
https://bit.ly/3cXEKWf	https://www.youtube.com/watch?v=
https://support.heptabase.com/en/articles/10448156-how-do-i-contact-heptabase-support	https://clients2.google.com/service/update2/crx

Raw Manifest

{
  "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFmtc10l4gz4F1hTMnC7yVo9an8yxvfv4wdpawrzMY5SLcXiPTV7kOAcMLoeg2sYvGkKqJOfMiIxWsk6fvpBALK+vfVf7xr2/oOKBhPcVt7I87p2CFSwUqn6FyBI4tfCo//Wdmdr5IZBFCMGnwfI71LqB/9jtVmwuhF08nGNcjcMX3Yj0rmNWumCVMSkBtBLcuLDhyeR7UF+XANcdTRw7nu5hyavNuPEcD9qpAoQVJugfiHzrW/iNeEGdK7NbYj+otlyKoWPhdliLC91Kty3f/R9kDfUgGzyzDJKSF0OsMyiPQ9cFaCMTAR0md1h1C9OrM1UrKr+zCw0FZy072a0bQIDAQAB",
  "name": "Heptabase Web Clipper",
  "icons": {
    "16": "public/icons/icon16.png",
    "32": "public/icons/icon32.png",
    "48": "public/icons/icon48.png",
    "128": "public/icons/icon128.png"
  },
  "action": {
    "default_popup": "action/default_popup.html",
    "default_title": "Save to Heptabase"
  },
  "version": "1.5.0",
  "background": {
    "service_worker": "background/service_worker.js"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Save and tag web content to Heptabase.",
  "permissions": [
    "activeTab",
    "scripting",
    "storage"
  ],
  "host_permissions": [
    "https://*.heptabase.com/",
    "http://localhost/"
  ],
  "manifest_version": 3,
  "web_accessible_resources": [
    {
      "matches": [
        "<all_urls>"
      ],
      "resources": [
        "web_accessible_resources/*"
      ]
    }
  ]
}

by ✦ Astarte

Heptabase Web Clipper

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Host Permissions:

Embedded URLs (40 total):

Raw Manifest

Detections

Manifest Findings