PrintFriendly - Print, PDF, and Screenshot Web Pages
Version 6.7.10 View in Chrome Web Store
Extension Details
Context-Aware Verdict
PrintFriendly is a well-established extension with over 1 million users and a strong 4.6-star rating from 4,300+ reviews. The developer, Print Friendly LLC, appears to be a legitimate company focused on print optimization services. The extension's core functionality of creating print-friendly versions of web pages aligns well with its requested permissions, and the high user adoption suggests community trust.
The unlimitedStorage permission stands out as potentially excessive for a print formatting tool. While the extension may need to cache processed pages or user preferences, unlimited storage capacity could theoretically be misused. The combination of activeTab access with scripting permissions allows the extension to modify page content, which is necessary for its functionality but creates potential for abuse. The contextMenus permission, while appropriate for user convenience, adds another attack surface.
This extension presents moderate risk due to its broad permissions but appears legitimate based on its reputation and user base. Consider running it in a separate Chrome profile if you handle highly sensitive information, though this may be unnecessary for most users. Monitor your browser's storage usage periodically, and be aware that the extension can access and modify content on any tab you activate it on. The strong user rating and established developer provide reasonable confidence in the extension's trustworthiness.
Findings
Security Analysis Details
Required Permissions:
- activeTab
- contextMenus
- scripting
- storage
- unlimitedStorage
Optional Permissions:
- cookies
- webNavigation
- downloads
Content Security Policy:
- extension_pages: script-src 'self'; object-src 'self';
- sandbox: sandbox allow-scripts allow-popups allow-modals allow-downloads; script-src 'self'; child-src 'self';
Embedded URLs (58 total):
| http://www.w3.org/2000/svg | https://www.printfriendly.com | |
| https://www.google-analytics.com/mp/collect?measurement_id= | https://printfriendly.com | |
| https://api.printfriendly.com/v2/pdf/create?api_key=chrome-extension- | https://clients2.google.com/service/update2/crx | |
| https://www.printfriendly.com/ | https://printfriendly.com/ | |
| https://tailwindcss.com | https://reactjs.org/docs/error-decoder.html?invariant= | |
| http://www.w3.org/1999/xlink | http://www.w3.org/XML/1998/namespace | |
| http://www.w3.org/1998/Math/MathML | http://www.w3.org/1999/xhtml | |
| https://youtu.be/BQNLD4iL094 | https://cdn.printfriendly.com/icons/globe.svg | |
| https://www.youtube.com/embed/ | https://youtu.be/ | |
| https://img.youtube.com/vi/ | https://www.youtube.com/playlist?list= | |
| https://www.facebook.com/plugins/page.php | https://www.printfriendly.com/email/new | |
| https://www.printfriendly.com/pdf-tools/compress-pdf | https://www.printfriendly.com/pdf-tools/pdf-converter | |
| https://www.printfriendly.com/pdf-tools/edit-pdf | https://printfriendly.freshdesk.com/support/tickets/new | |
| https://example.com | https://chromewebstore.google.com/detail/printfriendly-print-pdf-a/ohlencieiipommannpdfcmfdpjjmeolj/reviews?hl=en | |
| http://www.w3.org/1999/02/22-rdf-syntax-ns# | http://jspdf.default.namespaceuri/ | |
| https://github.com/jamesbrobb | https://github.com/Pantura | |
| http://opensource.org/licenses/mit-license | https://github.com/deanm/omggif | |
| http://www.fpdf.org/en/script/script37.php | http://www.myersdaily.org/joseph/javascript/md5.js | |
| https://www.cs.cmu.edu/~dst/Adobe/Gallery/anon21jul01-pdf-encryption.txt | https://github.com/foliojs/pdfkit/blob/master/lib/security.js | |
| http://www.phpied.com/rgb-color-parser-in-javascript/ | https://webpjs.appspot.com | |
| https://github.com/MrRio/jsPDF | http://www.yworks.com | |
| https://github.com/HackbrettXXX | https://github.com/acspike | |
| https://github.com/willowsystems | https://github.com/pablohess | |
| https://github.com/fjenett | https://github.com/warrenweckesser | |
| https://github.com/lifof | https://github.com/lsdriscoll | |
| https://github.com/stefslon | https://github.com/jmorel | |
| https://github.com/chris-rock | https://github.com/juanpgaviria | |
| https://github.com/dollaruw | https://github.com/diegocr | |
| https://github.com/Flamenco | https://github.com/Gavvers |
Raw Manifest
{ "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCv9zsC6sxYyVj0O0JqoH8ZHAeUVP/cOG5cNqf88kID0LgwIaPWWXQB4vAfwOyHGV7ZaN5IEgngd11MU3iiGa0STjlDeZD0neeTHLIyvovz3q6v+9fAeOtcyPcexNbPvGO9AU+aWRBtBf8+xUwUOEdlB9joM/E4xcx/V44XyRsZXwIDAQAB", "name": "__MSG_app_name__", "icons": { "16": "assets/icons/16_16.png", "32": "assets/icons/32_32.png", "48": "assets/icons/48_48.png", "128": "assets/icons/128_128.png" }, "action": { "default_icon": { "16": "assets/icons/16_16.png", "32": "assets/icons/32_32.png", "48": "assets/icons/48_48.png", "128": "assets/icons/128_128.png" }, "default_title": "__MSG_app_name__" }, "sandbox": { "pages": [ "sandbox.html" ] }, "version": "6.7.10", "incognito": "split", "background": { "type": "module", "service_worker": "background.js" }, "update_url": "https://clients2.google.com/service/update2/crx", "description": "__MSG_app_description__", "permissions": [ "activeTab", "contextMenus", "scripting", "storage", "unlimitedStorage" ], "homepage_url": "https://www.printfriendly.com", "options_page": "options.html", "default_locale": "en", "manifest_version": 3, "optional_permissions": [ "cookies", "webNavigation", "downloads" ], "externally_connectable": { "matches": [ "https://www.printfriendly.com/*", "https://printfriendly.com/*", "https://*.printfriendly.com/*" ] }, "content_security_policy": { "sandbox": "sandbox allow-scripts allow-popups allow-modals allow-downloads; script-src 'self'; child-src 'self';", "extension_pages": "script-src 'self'; object-src 'self';" }, "web_accessible_resources": [ { "matches": [ "*://*/*" ], "resources": [ "assets/logo.png", "print-in-tab.html", "sandbox.html", "assets/pf-styles.css", "printfriendly.css" ] } ], "optional_host_permissions": [ "<all_urls>" ] }
ⓘ CRXaminer has partnered with our friends at Secure Annex to provide additional findings unique to their platform.
Secure Annex also analyzes extensions from other browsers, IDEs, and can continuously monitor.
This extension may not yet be analyzed by Secure Annex.