[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Mobility Print

Version 1.4.5 View in Chrome Web Store

Last scanned: about 2 hours ago

Extension Details

Developer: papercut.com

Rating: 2.4 ★ (34 ratings)

Users: 2,000,000

Context-Aware Verdict

HIGH

Overall Risk

Based on 3 total findings, including 2 high-risk findings.

Findings

HIGH

Broad Host Permissions

This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.

HIGH

High-Risk Permission: identity

This extension has the identity permission. Can access your identity information. This could potentially be used maliciously to compromise security or privacy.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Security Analysis Details

Required Permissions:

background
identity
mdns
printerProvider
storage
system.display
system.network
offscreen
enterprise.deviceAttributes

Host Permissions:

http://*/*
https://*/*

Embedded URLs (174 total):

http://www.w3.org/2000/svg	https://clients2.google.com/service/update2/crx
http://10.100.65.46:9163	http://mobilityqa.pb1.lan:9163
https://mobilityprint.papercut.com/OrgID/test-register123/?token=ewerrrrtrt	https://mobilityprint.papercut.com/OrgID/mobserverid/?token=hudhhddudjd
http://myhost.mydomain.com:9163	http://192.168.1.2:9163
https://mobilityprint.papercut.com/OrgID/InstanceID/?token=tokenCreationToken	https://tc39.es/ecma262/#sec-array.prototype.includes
https://tc39.es/ecma262/#sec-array.prototype.indexof	https://tc39.es/ecma262/#sec-getmethod
https://github.com/zloirock/core-js/issues/86#issuecomment-115759028	https://tc39.es/ecma262/#sec-hasownproperty
https://github.com/mozilla/rhino/issues/346	https://tc39.es/ecma262/#sec-isarray
https://tc39.es/ecma262/#sec-IsHTMLDDA-internal-slot	https://tc39.es/ecma262/#sec-iscallable
https://tc39.es/ecma262/#sec-IsHTMLDDA-internal-slot-aec	https://tc39.es/ecma262/#sec-lengthofarraylike
https://tc39.es/ecma262/#sec-math.trunc	https://tc39.es/ecma262/#sec-object.defineproperty
https://tc39.es/ecma262/#sec-object.getownpropertydescriptor	https://tc39.es/ecma262/#sec-object.getownpropertynames
https://tc39.es/ecma262/#sec-object.prototype.propertyisenumerable	https://tc39.es/ecma262/#sec-ordinarytoprimitive
https://tc39.es/ecma262/#sec-requireobjectcoercible	https://github.com/zloirock/core-js/blob/v3.35.1/LICENSE
https://github.com/zloirock/core-js	https://tc39.es/ecma262/#sec-tointegerorinfinity
https://tc39.es/ecma262/#sec-tolength	https://tc39.es/ecma262/#sec-toobject
https://tc39.es/ecma262/#sec-toprimitive	https://tc39.es/ecma262/#sec-topropertykey
https://bugs.chromium.org/p/v8/issues/detail?id=3334	https://github.com/tc39/proposal-well-formed-stringify
https://tc39.es/ecma262/#sec-json.stringify	https://jquery.com/
https://jquery.org/license	https://github.com/whatwg/html/issues/2369
https://html.spec.whatwg.org/#nonce-attributes	https://drafts.csswg.org/cssom/#common-serializing-idioms
https://www.w3.org/TR/css-syntax-3/#ident-token-diagram	https://www.w3.org/TR/selectors/#attribute-selectors
https://www.w3.org/TR/CSS21/syndata.html#escaped-characters	https://bugs.jquery.com/ticket/13393
https://github.com/jquery/sizzle/issues/157	https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled
https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled	https://html.spec.whatwg.org/multipage/forms.html#category-listed
https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled	https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled
https://bugs.webkit.org/show_bug.cgi?id=136851	https://drafts.csswg.org/selectors/#relational
https://github.com/jquery/sizzle/pull/225	https://www.w3.org/TR/selectors/#pseudo-classes
https://github.com/jquery/sizzle/issues/299	https://www.w3.org/TR/selectors/#lang-pseudo
https://www.w3.org/TR/2011/REC-css3-selectors-20110929/#checked	https://www.w3.org/TR/selectors/#empty-pseudo
https://promisesaplus.com/#point-59	https://promisesaplus.com/#point-48
https://promisesaplus.com/#point-54	https://promisesaplus.com/#point-75
https://promisesaplus.com/#point-64	https://promisesaplus.com/#point-61
https://promisesaplus.com/#point-57	https://bugs.chromium.org/p/chromium/issues/detail?id=378607
https://www.w3.org/TR/DOM-Level-3-Events/#event-type-click	https://www.w3.org/TR/2003/WD-DOM-Level-3-Events-20030331/ecma-script-binding.html
https://bugzilla.mozilla.org/show_bug.cgi?id=687787	http://www.w3.org/TR/DOM-Level-3-Events/#events-focusevent-event-order
https://bugs.chromium.org/p/chromium/issues/detail?id=449857	https://bugs.chromium.org/p/chromium/issues/detail?id=470258
https://connect.microsoft.com/IE/feedback/details/1736512/	https://jsperf.com/getall-vs-sizzle/2
https://www.w3.org/TR/css-syntax-3/#input-preprocessing	https://drafts.csswg.org/cssom/#resolved-values
https://developer.mozilla.org/en-US/docs/CSS/display	https://html.spec.whatwg.org/multipage/syntax.html#attributes-2

Page 1 of 3

Raw Manifest

{
  "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgASSTW8y/NkCMKVJRygUlEUAzjvPZL9iu8zKv1qVNaTfjdfxnyV/UFqAitRe+DZYkcgvEgPzqfLow8GhL+Tf37HopMjuiMp3zRvrdiSsyG0GLGcSJUDqsffZ8aBIDEQXUA4za3jUtSe98RHahCE8W9K4IBbmbvEl0t1z276DdDMnyxplwlA0IKLt32pzdWDkhGRJ1zkbY6Z4tgRwJH4g4zeFISzPh761zCIP31h1rDnhi6LSnWhoKhjqNQSVu2lHPgMTv9RFGjWCFKdarSJB3FSCtJo3H13UNaAA32T8G0OZ0JAtI6pWmRldPU9YoRfe7n0WvPpHlfC8bBVrvd/+DwIDAQAB",
  "name": "Mobility Print",
  "icons": {
    "16": "icons/icon_16.png",
    "48": "icons/icon_48.png",
    "72": "icons/icon_72.png",
    "96": "icons/icon_96.png",
    "120": "icons/icon_120.png",
    "128": "icons/icon_128.png",
    "144": "icons/icon_144.png",
    "192": "icons/icon_192.png"
  },
  "action": {
    "default_icon": {
      "16": "icons/icon_16.png",
      "48": "icons/icon_48.png",
      "72": "icons/icon_72.png",
      "96": "icons/icon_96.png",
      "120": "icons/icon_120.png",
      "128": "icons/icon_128.png",
      "144": "icons/icon_144.png",
      "192": "icons/icon_192.png"
    },
    "default_popup": "index.html",
    "default_title": "Mobility Print"
  },
  "author": {
    "name": "PaperCut Software",
    "email": "support@papercut.com"
  },
  "oauth2": {
    "scopes": [
      "email"
    ],
    "client_id": "89073488612-m55irqf3sqr6pmpnh5fimconmef04j97.apps.googleusercontent.com"
  },
  "storage": {
    "managed_schema": "schema.json"
  },
  "version": "1.4.5",
  "background": {
    "service_worker": "scripts/main.js"
  },
  "options_ui": {
    "page": "options.html",
    "open_in_tab": false
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Mobility Print",
  "permissions": [
    "background",
    "identity",
    "mdns",
    "printerProvider",
    "storage",
    "system.display",
    "system.network",
    "offscreen",
    "enterprise.deviceAttributes"
  ],
  "default_locale": "en",
  "host_permissions": [
    "http://*/*",
    "https://*/*"
  ],
  "manifest_version": 3,
  "externally_connectable": {
    "ids": [
      "alhngdkjgnedakdlnamimgfihgkmenbh",
      "ndakideadaglgpbblmppfonobpdgggin"
    ],
    "matches": [
      "*://mp.cloud.papercut.com/*",
      "*://mp.cloud.papercut.software/*"
    ]
  },
  "minimum_chrome_version": "114"
}

by ✦ Astarte

Mobility Print

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Host Permissions:

Embedded URLs (174 total):

Raw Manifest

Detections

Manifest Findings