[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

ServiceNow Switch Instance

Version 1.0.6 View in Chrome Web Store

Last scanned: 8 months ago | force re-scan

Extension Details

Rating: 5.0 ★ (2 ratings)

Size: 13.57KiB

Last Updated: January 29, 2018

Users: 327

Context-Aware Verdict

MEDIUM

Overall Risk

Trust Factors:

- The extension is published by an unknown author/developer, which raises some concerns about its trustworthiness.

- The extension has a relatively low number of users (327), which could indicate that it has not been widely vetted by the community.

- The extension has not been updated in over 4 years, which suggests that it may not be actively maintained or compatible with the latest versions of Chrome.

Concerns:

- The extension requests the "tabs" permission, which is considered a high-risk permission as it allows the extension to access and manipulate browser tabs, potentially compromising security and privacy.

- The extension uses Manifest Version 2, which has fewer security restrictions than the newer Manifest Version 3.

Recommendations:

- Exercise caution when installing this extension, as it is from an unknown source and has not been widely adopted or recently updated.

- Consider using an alternative extension from a reputable developer or company, if available.

- If you decide to use this extension, it is recommended to run it in a separate Chrome profile or incognito mode to isolate it from your main browsing session and minimize potential risks.

- Regularly review the permissions and behavior of the extension to ensure it is not engaging in any suspicious activities.

- Keep an eye out for updates or alternatives that use the more secure Manifest Version 3.

Findings

HIGH

High-Risk Permission: tabs

This extension has the tabs permission. Can access browser tab information and manipulate tabs. This could potentially be used maliciously to compromise security or privacy.

MEDIUM

Medium-Risk Permission: activeTab

This extension has the activeTab permission. Can access the active tab when clicking the extension icon.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

MEDIUM

Older Manifest Version

This extension uses Manifest Version 2, which has fewer security restrictions than Manifest V3. Consider using extensions that have upgraded to V3.

Raw Manifest

{
  "name": "ServiceNow Switch Instance",
  "icons": {
    "16": "icon16.png",
    "48": "icon48.png",
    "128": "icon128.png"
  },
  "author": "Rafal Rataj",
  "version": "1.0.6",
  "short_name": "Switch Instance",
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "This extension allows you to switch to the same page on a different ServiceNow instance based on the URL.",
  "permissions": [
    "activeTab",
    "storage",
    "tabs"
  ],
  "options_page": "options.html",
  "browser_action": {
    "default_icon": "icon16.png",
    "default_popup": "popup.html",
    "default_title": "Switch Instance"
  },
  "manifest_version": 2
}

by ✦ Astarte

https://clients2.google.com/service/update2/crx	https://mycomapny.my-domain.net
https://developer.chrome.com/extensions/contentSecurityPolicy	https://developer.chrome.com/extensions/tabs#method-query
https://developer.chrome.com/extensions/tabs#type-Tab

ServiceNow Switch Instance

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Embedded URLs (5 total):

Raw Manifest

Detections

Manifest Findings