Floating Video Player for Youtube™ Videos
Version 3.1.2 View in Chrome Web Store
Extension Details
Context-Aware Verdict
The extension demonstrates good trust indicators with 20,000 users and a solid 4.5-star rating from 481 reviews, suggesting positive user experiences. The functionality aligns well with its stated purpose of providing floating video capabilities for YouTube. The use of Manifest V3 indicates compliance with modern Chrome extension security standards.
The primary concern is the content script injection on YouTube domains, which is necessary for the extension's functionality but does grant access to YouTube pages. However, this permission is appropriately scoped and directly related to the extension's core purpose. The lack of additional permissions beyond what's needed for YouTube interaction is actually a positive security indicator.
The absence of host permissions, background scripts, and web accessible resources suggests a lightweight implementation focused solely on YouTube video manipulation. No significant security findings were detected during analysis.
This extension appears safe for general use given its minimal permission footprint and focused functionality. Users can install it with confidence in their main Chrome profile. However, as with any extension that modifies web page behavior, users should monitor for any unexpected changes to their YouTube experience. The extension's popularity and positive ratings suggest it's well-maintained and trustworthy for its intended purpose of creating floating YouTube video players.
Findings
Security Analysis Details
Embedded URLs (9 total):
| https://microsoftedge.microsoft.com/addons/detail/ | https://chrome.google.com/webstore/detail/ | |
| https://clients2.google.com/service/update2/crx | https://floating-youtube.freeonlineapps.net/ | |
| https://bootswatch.com | https://getbootstrap.com/ | |
| https://github.com/twbs/bootstrap/blob/main/LICENSE | https://fonts.googleapis.com/css2?family=Nunito+Sans:wght@400 | |
| http://www.w3.org/2000/svg |
Raw Manifest
{ "name": "__MSG_application_title__", "icons": { "16": "icons/icon-16.png", "32": "icons/icon-32.png", "48": "icons/icon-48.png", "96": "icons/icon-96.png", "128": "icons/icon-128.png" }, "action": { "default_icon": { "16": "icons/icon-16.png", "24": "icons/icon-24.png", "32": "icons/icon-32.png" }, "default_popup": "/ui/popup.html", "default_title": "__MSG_application_title__" }, "version": "3.1.2", "background": { "service_worker": "/js/background.js" }, "update_url": "https://clients2.google.com/service/update2/crx", "description": "__MSG_application_description__", "homepage_url": "https://floating-youtube.freeonlineapps.net/", "default_locale": "en", "content_scripts": [ { "js": [ "/js/inject.js" ], "matches": [ "*://www.youtube.com/*" ] } ], "manifest_version": 3 }
ⓘ CRXaminer has partnered with our friends at Secure Annex to provide additional findings unique to their platform.
Secure Annex also analyzes extensions from other browsers, IDEs, and can continuously monitor.
This extension may not yet be analyzed by Secure Annex.