[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

PrintFriendly: Reader Mode, PDF Editor, Save as PDF & Screenshot

Version 7.2.2 View in Chrome Web Store

Last scanned: about 5 hours ago

Extension Details

Developer: Print Friendly LLC

Rating: 4.6 ★ (5.2K ratings)

Users: 1,000,000

Context-Aware Verdict

MEDIUM

Overall Risk

Based on 5 total findings, including 1 high-risk finding.

Findings

HIGH

Unsafe WebAssembly Execution

This extension's Content Security Policy allows 'wasm-unsafe-eval', which permits potentially dangerous WebAssembly code execution. This could be used to hide malicious code or perform CPU-intensive operations.

MEDIUM

Medium-Risk Permission: activeTab

This extension has the activeTab permission. Can access the active tab when clicking the extension icon.

MEDIUM

Medium-Risk Permission: contextMenus

This extension has the contextMenus permission. Can add items to the context menu.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

MEDIUM

Medium-Risk Permission: unlimitedStorage

This extension has the unlimitedStorage permission. Can store unlimited data locally.

Security Analysis Details

Required Permissions:

activeTab
contextMenus
scripting
storage
unlimitedStorage

Optional Permissions:

cookies
downloads
webNavigation
webRequest

Content Security Policy:

extension_pages: script-src 'self' 'wasm-unsafe-eval'; object-src 'self';
sandbox: sandbox allow-scripts allow-popups allow-modals allow-downloads; script-src 'self'; child-src 'self';

Embedded URLs (206 total):

https://github.com/zloirock/core-js/blob/v3.48.0/LICENSE	https://github.com/zloirock/core-js
http://example.com	http://www.w3.org/2000/svg
https://foo.bar	https://community.apryse.com/t/what-is-the-best-location-to-call-pdfnet-apis-when-used-in-conjunction-with-webviewer/5210
https://docs.apryse.com/documentation/web/get-started/	https://docs.apryse.com/api/web/global.html#WebViewerOptions
https://docs.apryse.com/documentation/web/guides/wv-inside/#loading-webviewer-from-another-domain	https://www.printfriendly.com
https://upload.printfriendly.com	https://www.google-analytics.com/mp/collect?measurement_id=
https://printfriendly.com	https://chromewebstore.google.com/
https://chrome.google.com/webstore	https://microsoftedge.microsoft.com/addons
https://addons.mozilla.org/	https://api.printfriendly.com/v2/pdf/create?api_key=chrome-extension-
https://cdn.syndication.twimg.com/tweet-result?id=	https://chatgpt.com/
https://claude.ai/	https://gemini.google.com/
https://docs.google.com/	https://mail.google.com/
https://drive.google.com/file/	https://drive.google.com/drive/
https://cdn.syndication.twimg.com/	https://www.printfriendly.com/
https://en.wikipedia.org/wiki/Jupiter	https://www.printfriendly.com/support/contact
https://clients2.google.com/service/update2/crx	https://printfriendly.com/
https://tailwindcss.com	https://reactjs.org/docs/error-decoder.html?invariant=
http://www.w3.org/1999/xlink	http://www.w3.org/XML/1998/namespace
http://www.w3.org/1998/Math/MathML	http://www.w3.org/1999/xhtml
http://www.w3.org/2000/svg%22%20viewBox=%220%200%2020%2020%22%20fill=%22%236B7280%22%3E%3Cpath%20fill-rule=%22evenodd%22%20d=%22M5.293%207.293a1%201%200%20011.414%200L10%2010.586l3.293-3.293a1%201%200%20111.414%201.414l-4%204a1%201%200%2001-1.414%200l-4-4a1%201%200%20010-1.414z%22%20clip-rule=%22evenodd%22%2F%3E%3C/svg%3E	https://chromewebstore.google.com/detail/printfriendly-print-pdf-a/ohlencieiipommannpdfcmfdpjjmeolj
https://www.youtube.com/watch?v=XKFp29E13h4	https://cdn.printfriendly.com/icons/globe.svg
https://www.youtube.com/embed/	https://youtu.be/
https://img.youtube.com/vi/	https://www.youtube.com/playlist?list=
https://www.facebook.com/plugins/page.php	https://icons.duckduckgo.com/ip3/
https://www.youtube.com/watch?v=	https://i.ytimg.com/vi/
https://x.com/	https://printfriendly.freshdesk.com/support/tickets/new
https://example.com	https://chromewebstore.google.com/detail/printfriendly-print-pdf-a/ohlencieiipommannpdfcmfdpjjmeolj/reviews?hl=en
https://github.com/MrRio/jsPDF	http://www.yworks.com
https://github.com/HackbrettXXX	https://github.com/acspike
https://github.com/willowsystems	https://github.com/pablohess
https://github.com/fjenett	https://github.com/warrenweckesser
https://github.com/lifof	https://github.com/lsdriscoll
https://github.com/stefslon	https://github.com/jmorel
https://github.com/chris-rock	https://github.com/juanpgaviria
https://github.com/dollaruw	https://github.com/diegocr
https://github.com/Flamenco	https://github.com/Gavvers
http://www.phpied.com/rgb-color-parser-in-javascript/	http://www.myersdaily.org/joseph/javascript/md5.js
http://www.fpdf.org/en/script/script37.php	http://opensource.org/licenses/mit-license
https://www.cs.cmu.edu/~dst/Adobe/Gallery/anon21jul01-pdf-encryption.txt	https://github.com/foliojs/pdfkit/blob/master/lib/security.js
https://github.com/jamesbrobb	https://github.com/deanm/omggif

Page 1 of 3

Raw Manifest

{
  "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCv9zsC6sxYyVj0O0JqoH8ZHAeUVP/cOG5cNqf88kID0LgwIaPWWXQB4vAfwOyHGV7ZaN5IEgngd11MU3iiGa0STjlDeZD0neeTHLIyvovz3q6v+9fAeOtcyPcexNbPvGO9AU+aWRBtBf8+xUwUOEdlB9joM/E4xcx/V44XyRsZXwIDAQAB",
  "name": "__MSG_app_name__",
  "icons": {
    "16": "assets/icons/16_16.png",
    "32": "assets/icons/32_32.png",
    "48": "assets/icons/48_48.png",
    "128": "assets/icons/128_128.png"
  },
  "action": {
    "default_icon": {
      "16": "assets/icons/16_16.png",
      "32": "assets/icons/32_32.png",
      "48": "assets/icons/48_48.png",
      "128": "assets/icons/128_128.png"
    },
    "default_title": "__MSG_app_name__"
  },
  "sandbox": {
    "pages": [
      "sandbox.html"
    ]
  },
  "version": "7.2.2",
  "commands": {
    "print-page": {
      "description": "Open PrintFriendly and print",
      "suggested_key": {
        "mac": "Command+Shift+7",
        "default": "Ctrl+Shift+7"
      }
    },
    "save-as-pdf": {
      "description": "Open PrintFriendly and save as PDF",
      "suggested_key": {
        "mac": "Command+Shift+6",
        "default": "Ctrl+Shift+6"
      }
    },
    "open-printfriendly": {
      "description": "Open PrintFriendly page",
      "suggested_key": {
        "mac": "Command+Shift+0",
        "default": "Ctrl+Shift+0"
      }
    },
    "save-as-screenshot": {
      "description": "Take a full page screenshot",
      "suggested_key": {
        "mac": "Command+Shift+9",
        "default": "Ctrl+Shift+9"
      }
    }
  },
  "incognito": "split",
  "background": {
    "type": "module",
    "service_worker": "background.js"
  },
  "short_name": "__MSG_app_short_name__",
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "__MSG_app_description__",
  "permissions": [
    "activeTab",
    "contextMenus",
    "scripting",
    "storage",
    "unlimitedStorage"
  ],
  "homepage_url": "https://www.printfriendly.com",
  "options_page": "options.html",
  "default_locale": "en",
  "manifest_version": 3,
  "optional_permissions": [
    "cookies",
    "downloads",
    "webNavigation",
    "webRequest"
  ],
  "externally_connectable": {
    "matches": [
      "https://www.printfriendly.com/*",
      "https://printfriendly.com/*",
      "https://*.printfriendly.com/*"
    ]
  },
  "content_security_policy": {
    "sandbox": "sandbox allow-scripts allow-popups allow-modals allow-downloads; script-src 'self'; child-src 'self';",
    "extension_pages": "script-src 'self' 'wasm-unsafe-eval'; object-src 'self';"
  },
  "web_accessible_resources": [
    {
      "matches": [
        "*://*/*"
      ],
      "resources": [
        "assets/logo.png",
        "print-in-tab.html",
        "sandbox.html",
        "assets/pf-styles.css",
        "printfriendly.css",
        "viewer.html",
        "webviewer/lib/*",
        "apryse-custom.css",
        "fonts/icomoon/*",
        "pf-pdf-viewer.css",
        "logo.png"
      ]
    },
    {
      "matches": [
        "*://www.google.com/*",
        "*://www.google.co.uk/*",
        "*://www.google.ca/*",
        "*://www.google.com.au/*",
        "*://www.google.de/*",
        "*://www.google.fr/*",
        "*://www.google.es/*",
        "*://www.google.it/*",
        "*://www.google.co.in/*",
        "*://www.google.co.jp/*",
        "*://www.google.co.kr/*",
        "*://www.google.com.br/*",
        "*://www.google.com.hk/*",
        "*://www.google.com.tr/*",
        "*://www.google.com.tw/*",
        "*://www.google.com.ua/*",
        "*://www.google.cz/*",
        "*://www.google.dk/*",
        "*://www.google.fi/*",
        "*://www.google.hr/*",
        "*://www.google.hu/*",
        "*://www.google.nl/*",
        "*://www.google.no/*",
        "*://www.google.pl/*",
        "*://www.google.pt/*",
        "*://www.google.ro/*",
        "*://www.google.ru/*",
        "*://www.google.se/*",
        "*://www.google.si/*",
        "*://www.google.sk/*",
        "*://www.bing.com/*"
      ],
      "resources": [
        "search-widget.html"
      ],
      "use_dynamic_url": true
    }
  ],
  "optional_host_permissions": [
    "<all_urls>"
  ]
}

by ✦ Astarte

PrintFriendly: Reader Mode, PDF Editor, Save as PDF & Screenshot

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Optional Permissions:

Content Security Policy:

Embedded URLs (206 total):

Raw Manifest

Detections

Manifest Findings