[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Better Bookmarks | Streamline Your Favorites

Version 2.0.1 View in Chrome Web Store

Last scanned: about 6 hours ago

Extension Details

Developer: betterbookmarks.io

Rating: 4.2 ★ (44 ratings)

Users: 4,000

Context-Aware Verdict

MEDIUM

Overall Risk

Based on 2 total findings, including 1 high-risk finding.

Findings

HIGH

High-Risk Permission: bookmarks

This extension has the bookmarks permission. Can access and modify bookmarks. This could potentially be used maliciously to compromise security or privacy.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Security Analysis Details

Required Permissions:

bookmarks
favicon
storage

Content Security Policy:

extension_pages: script-src 'self'; object-src 'self'

Embedded URLs (152 total):

https://fonts.googleapis.com/css?family=PT+Sans	http://www.w3.org/2000/svg
https://developer.mozilla.org/docs/Mozilla/Add-ons/WebExtensions/API/runtime/onMessage	http://mozilla.org/MPL/2.0/.
https://github.com/mozilla/webextension-polyfill/issues/130	https://github.com/zloirock/core-js/issues/86#issuecomment-115759028
https://tc39.github.io/ecma262/#sec-object.defineproperty	https://tc39.github.io/ecma262/#sec-toobject
https://tc39.github.io/ecma262/#sec-array.prototype.entries	https://tc39.github.io/ecma262/#sec-array.prototype.keys
https://tc39.github.io/ecma262/#sec-array.prototype.values	https://tc39.github.io/ecma262/#sec-array.prototype-@@iterator
https://tc39.github.io/ecma262/#sec-createarrayiterator	https://tc39.github.io/ecma262/#sec-%arrayiteratorprototype%.next
https://tc39.github.io/ecma262/#sec-createunmappedargumentsobject	https://tc39.github.io/ecma262/#sec-createmappedargumentsobject
https://tc39.github.io/ecma262/#sec-array.prototype-@@unscopables	https://tc39.github.io/ecma262/#sec-requireobjectcoercible
https://tc39.github.io/ecma262/#sec-string.prototype-@@iterator	https://tc39.github.io/ecma262/#sec-%stringiteratorprototype%.next
https://tc39.github.io/ecma262/#sec-tolength	https://tc39.github.io/ecma262/#sec-object.create
https://github.com/mozilla/rhino/issues/346	https://tc39.github.io/ecma262/#sec-tointeger
https://tc39.github.io/ecma262/#sec-toprimitive	https://tc39.github.io/ecma262/#sec-isarray
https://tc39.github.io/ecma262/#sec-object.keys	https://tc39.github.io/ecma262/#sec-array.prototype.foreach
https://tc39.github.io/ecma262/#sec-array.prototype.map	https://tc39.github.io/ecma262/#sec-array.prototype.filter
https://tc39.github.io/ecma262/#sec-array.prototype.some	https://tc39.github.io/ecma262/#sec-array.prototype.every
https://tc39.github.io/ecma262/#sec-array.prototype.find	https://tc39.github.io/ecma262/#sec-array.prototype.findIndex
https://tc39.github.io/ecma262/#sec-object.getownpropertydescriptor	https://tc39.github.io/ecma262/#sec-object.prototype.propertyisenumerable
https://tc39.github.io/ecma262/#sec-array.isarray	https://tc39.github.io/ecma262/#sec-object.getprototypeof
https://people.mozilla.org/~jorendorff/es6-draft.html#sec-generatorresume	https://github.com/facebook/regenerator/issues/274
https://tc39.github.io/ecma262/#sec-object.getownpropertynames	https://tc39.github.io/ecma262/#sec-array.prototype.includes
https://tc39.github.io/ecma262/#sec-array.prototype.indexof	https://tc39.github.io/ecma262/#sec-%iteratorprototype%-object
https://tc39.github.io/ecma262/#sec-object.setprototypeof	https://tc39.github.io/ecma262/#sec-string.prototype.codepointat
https://github.com/mathiasbynens/String.prototype.at	https://tc39.github.io/ecma262/#sec-object.defineproperties
https://tc39.github.io/ecma262/#sec-arrayspeciescreate	https://example.com/welcome
https://example.com/goodbye	https://github.com/zloirock/core-js/issues/173
https://code.google.com/p/v8/issues/detail?id=687	https://tc39.github.io/ecma262/#sec-symbol-constructor
https://github.com/tc39/proposal-Symbol-description	https://tc39.github.io/ecma262/#sec-symbol.for
https://tc39.github.io/ecma262/#sec-symbol.keyfor	https://tc39.github.io/ecma262/#sec-object.getownpropertydescriptors
https://tc39.github.io/ecma262/#sec-object.getownpropertysymbols	https://bugs.chromium.org/p/v8/issues/detail?id=3443
https://tc39.github.io/ecma262/#sec-json.stringify	https://tc39.github.io/ecma262/#sec-symbol.prototype-@@toprimitive
https://tc39.github.io/ecma262/#sec-symbol.prototype-@@tostringtag	https://tc39.github.io/ecma262/#sec-symbol.prototype.description
https://tc39.github.io/ecma262/#sec-symbol.iterator	https://github.com/Simonwep/selection
https://mail.google.com/mail/u/0/?fs=1&to=support@betterbookmarks.io&tf=cm	http://www.w3.org/1999/xlink
https://tc39.github.io/ecma262/#sec-speciesconstructor	https://tc39.github.io/ecma262/#sec-object.assign
https://tc39.github.io/ecma262/#sec-date.prototype.tostring	https://tc39.github.io/ecma262/#sec-string.prototype.includes
https://tc39.github.io/ecma262/#sec-array.prototype.join	https://tc39.github.io/ecma262/#sec-array.prototype.slice
https://html.spec.whatwg.org/multipage/timers-and-user-prompts.html#timers	https://html.spec.whatwg.org/multipage/timers-and-user-prompts.html#dom-settimeout
https://html.spec.whatwg.org/multipage/timers-and-user-prompts.html#dom-setinterval	https://url.spec.whatwg.org/#url-class
https://url.spec.whatwg.org/#dom-url-href	https://url.spec.whatwg.org/#dom-url-origin

Page 1 of 2

Raw Manifest

{
  "name": "__MSG_extName__",
  "icons": {
    "16": "icons/icon-16.png",
    "32": "icons/icon-32.png",
    "64": "icons/icon-64.png",
    "128": "icons/icon-128.png"
  },
  "action": {
    "default_icon": "icons/icon-popup.png"
  },
  "version": "2.0.1",
  "background": {
    "service_worker": "js/background.js"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "__MSG_extDescription__",
  "permissions": [
    "bookmarks",
    "favicon",
    "storage"
  ],
  "default_locale": "en",
  "manifest_version": 3,
  "chrome_url_overrides": {
    "bookmarks": "bookmarks.html"
  },
  "content_security_policy": {
    "extension_pages": "script-src 'self'; object-src 'self'"
  }
}

by ✦ Astarte