[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Gmail Inbox Zero by cloudHQ

Version 1.0.1.6 View in Chrome Web Store

Last scanned: about 5 hours ago

Extension Details

Developer: cloudHQ LLC

Rating: 5.0 ★ (9 ratings)

Users: 1,000

Context-Aware Verdict

MEDIUM

Overall Risk

Based on 2 total findings.

Findings

MEDIUM

Access to Sensitive Domains

This extension requests access to sensitive domains: https://mail.google.com/, https://mail-attachment.googleusercontent.com/. Ensure you trust this extension with access to these sites.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Security Analysis Details

Required Permissions:

scripting
storage
background

Host Permissions:

https://mail.google.com/
https://mail-attachment.googleusercontent.com/
https://www.cloudhq.net/

Embedded URLs (186 total):

https://www.w3.org/TR/REC-xml/#NT-NameStartChar	https://html.spec.whatwg.org/multipage/parsing.html#escapingString
https://html.spec.whatwg.org/multipage/parsing.html#parsing-main-inforeign	https://github.com/facebook/react/blob/b5ac963fb791d1298e7f396236383bc955f916c1/src/isomorphic/classic/element/ReactElement.js#L21-L25
https://dom.spec.whatwg.org	http://dom.spec.whatwg.org/#dom-node-comparedocumentposition
http://www.w3.org/TR/DOM-Level-3-Core/glossary.html#dt-document-order	http://mathiasbynens.be/notes/javascript-encoding#surrogate-formulae
https://developer.mozilla.org/en-US/docs/Web/API/Node/textContent	https://developer.mozilla.org/en-US/docs/Web/API/Node/innerText
https://jquery.com/	https://jquery.org/license
https://github.com/whatwg/html/issues/2369	https://html.spec.whatwg.org/#nonce-attributes
https://drafts.csswg.org/cssom/#common-serializing-idioms	https://www.w3.org/TR/css-syntax-3/#ident-token-diagram
https://www.w3.org/TR/selectors/#attribute-selectors	https://www.w3.org/TR/CSS21/syndata.html#escaped-characters
https://bugs.jquery.com/ticket/13393	https://github.com/jquery/sizzle/issues/157
https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled	https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled
https://html.spec.whatwg.org/multipage/forms.html#category-listed	https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled
https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled	https://bugs.webkit.org/show_bug.cgi?id=136851
https://drafts.csswg.org/selectors/#relational	https://github.com/jquery/sizzle/pull/225
https://www.w3.org/TR/selectors/#pseudo-classes	https://github.com/jquery/sizzle/issues/299
https://www.w3.org/TR/selectors/#lang-pseudo	https://www.w3.org/TR/2011/REC-css3-selectors-20110929/#checked
https://www.w3.org/TR/selectors/#empty-pseudo	https://promisesaplus.com/#point-59
https://promisesaplus.com/#point-48	https://promisesaplus.com/#point-54
https://promisesaplus.com/#point-75	https://promisesaplus.com/#point-64
https://promisesaplus.com/#point-61	https://promisesaplus.com/#point-57
https://bugs.chromium.org/p/chromium/issues/detail?id=378607	https://www.w3.org/TR/DOM-Level-3-Events/#event-type-click
https://www.w3.org/TR/2003/WD-DOM-Level-3-Events-20030331/ecma-script-binding.html	https://bugzilla.mozilla.org/show_bug.cgi?id=687787
http://www.w3.org/TR/DOM-Level-3-Events/#events-focusevent-event-order	https://bugs.chromium.org/p/chromium/issues/detail?id=449857
https://bugs.chromium.org/p/chromium/issues/detail?id=470258	https://connect.microsoft.com/IE/feedback/details/1736512/
https://jsperf.com/getall-vs-sizzle/2	https://www.w3.org/TR/css-syntax-3/#input-preprocessing
https://drafts.csswg.org/cssom/#resolved-values	https://developer.mozilla.org/en-US/docs/CSS/display
https://html.spec.whatwg.org/multipage/syntax.html#attributes-2	https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace
https://html.spec.whatwg.org/#strip-and-collapse-whitespace	http://example.com:80x/
https://bugs.webkit.org/show_bug.cgi?id=137337	https://bugs.webkit.org/show_bug.cgi?id=29084
https://bugs.chromium.org/p/chromium/issues/detail?id=589347	https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon
https://github.com/jquery/jquery/pull/557	https://github.com/mathiasbynens/he/blob/36afe179392226cf1b6ccdb16ebbb7a5a844d93a/src/he.js#L106-L134
https://html.spec.whatwg.org/multipage/parsing.html#named-character-reference-state	https://github.com/w3c/webextensions/issues/8
https://www.cloudhq.net/	https://mail.google.com/mail/u/0/#inbox
https://mail.google.com/mail/u/	https://mail.google.com
https://www.cloudhq.net/images/blank.gif	https://www.cloudhq.net/images/cHQ_64x64_o.png
https://www.cloudhq.net/dashboard	https://www.cloudhq.net
https://www.cloudhq.net/chrome_extensions?	https://support.cloudhq.net/
https://outlook.office.com	https://docs.google.com/document/d/
https://websitescraper.cloudhq.workers.dev/scrape?scrapeUrl=	https://chat.openai.com/backend-api/files/file-hiQolgBpeslIi4XcnCC2Jf0K/download
https://files.oaiusercontent.com/file-hiQolgBpeslIi4XcnCC2Jf0K?se=2023-11-27T14%3A02%3A22Z&sp=r&sv=2021-08-06&sr=b&rscc=max-age%3D31536000%2C%20immutable&rscd=attachment%3B%20filename%3Daf9fa128-d0de-43f7-a572-664a56ea7fd8.webp&sig=BXC8jz1VEh7GVJauH7XSykFLaOm2G8uOd3VSnrq%2BruI%3D	https://chatgpt.com/backend-api/files/

Page 1 of 3

Raw Manifest

{
  "name": "__MSG_appName__",
  "icons": {
    "48": "icons/gmail_focus_mode.png",
    "128": "icons/gmail_focus_mode.png"
  },
  "action": {
    "default_icon": "icons/gmail_focus_mode.png",
    "default_title": "__MSG_appName__"
  },
  "author": "https://www.cloudhq.net",
  "version": "1.0.1.6",
  "background": {
    "service_worker": "background.js"
  },
  "short_name": "__MSG_appShortName__",
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "__MSG_appDetail__",
  "permissions": [
    "scripting",
    "storage",
    "background"
  ],
  "default_locale": "en",
  "content_scripts": [
    {
      "js": [
        "content.js"
      ],
      "css": [
        "stylesheets/main_gmail_focus_mode.css",
        "stylesheets/popover.css"
      ],
      "run_at": "document_end",
      "matches": [
        "https://mail.google.com/*"
      ],
      "exclude_globs": [],
      "include_globs": []
    }
  ],
  "host_permissions": [
    "https://mail.google.com/",
    "https://mail-attachment.googleusercontent.com/",
    "https://www.cloudhq.net/"
  ],
  "manifest_version": 3,
  "externally_connectable": {
    "matches": [
      "*://*.cloudhq.net/*"
    ]
  },
  "web_accessible_resources": [
    {
      "matches": [
        "*://*.cloudhq.net/*",
        "*://*.google.com/*"
      ],
      "resources": [
        "stylesheets/*",
        "icons/*",
        "*"
      ]
    }
  ],
  "converted_from_user_script": true
}

by ✦ Astarte

Gmail Inbox Zero by cloudHQ

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Host Permissions:

Embedded URLs (186 total):

Raw Manifest

Detections

Manifest Findings