[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

ACE Threshold Tracker

Version 0.33 View in Chrome Web Store

Last scanned: about 7 hours ago

Extension Details

Rating: 5.0 ★ (3 ratings)

Users: 58

Context-Aware Verdict

MEDIUM

Overall Risk

Based on 1 total findings, including 1 high-risk finding.

Findings

HIGH

High-Risk Permission: management

This extension has the management permission. Can manage other extensions. This could potentially be used maliciously to compromise security or privacy.

Security Analysis Details

Required Permissions:

management

Embedded URLs (148 total):

https://clients2.google.com/service/update2/crx	https://www2.dentistry.unc.edu/secure/assessment/studentassessmentall.cfm
https://www2.dentistry.unc.edu/secure/assessment/studentassessmentAll.cfm	https://dentalschool.unc.edu/secure/assessment/studentassessmentall.cfm
https://dentalschool.unc.edu/secure/assessment/studentassessmentAll.cfm	https://www2.dentistry.unc.edu/secure/assessment/ACEFormNew.cfm
https://www2.dentistry.unc.edu/secure/assessment/aceformnew.cfm	https://dentalschool.unc.edu/secure/assessment/ACEFormNew.cfm
https://dentalschool.unc.edu/secure/assessment/aceformnew.cfm	https://www.robotstxt.org/robotstxt.html
https://lodash.com/	https://openjsf.org/
https://lodash.com/license	http://underscorejs.org/LICENSE
https://npms.io/search?q=ponyfill.	http://ecma-international.org/ecma-262/7.0/#sec-patterns
http://ecma-international.org/ecma-262/7.0/#sec-template-literal-lexical-components	https://en.wikipedia.org/wiki/Combining_Diacritical_Marks
https://en.wikipedia.org/wiki/Combining_Diacritical_Marks_for_Symbols	https://mathiasbynens.be/notes/javascript-unicode
http://eev.ee/blog/2015/09/12/dark-corners-of-unicode/	http://ecma-international.org/ecma-262/7.0/#sec-object.prototype.tostring
http://ecma-international.org/ecma-262/7.0/#sec-samevaluezero	https://bugs.webkit.org/show_bug.cgi?id=156034
https://en.wikipedia.org/wiki/Exponentiation_by_squaring	https://mdn.io/clearTimeout
https://github.com/jashkenas/underscore/pull/1247	https://bugs.chromium.org/p/v8/issues/detail?id=90
http://ecma-international.org/ecma-262/7.0/#sec-ecmascript-function-objects-call-thisargument-argumentslist	https://es5.github.io/#x13.2.2
https://mdn.io/round#Examples	http://www.ecma-international.org/ecma-262/7.0/#sec-regexp.prototype.tostring
http://ecma-international.org/ecma-262/7.0/#sec-object.keys	https://bugs.chromium.org/p/v8/issues/detail?id=2070
https://mdn.io/setTimeout	https://mdn.io/Array/reverse
https://mdn.io/Array/slice	https://en.wikipedia.org/wiki/Symmetric_difference
https://mdn.io/iteration_protocols#iterator	https://en.wikipedia.org/wiki/Empty_set
https://en.wikipedia.org/wiki/Vacuous_truth	https://en.wikipedia.org/wiki/Fisher-Yates_shuffle
http://peter.michaux.ca/articles/lazy-function-definition-pattern	https://css-tricks.com/debouncing-throttling-explained-examples/
http://ecma-international.org/ecma-262/7.0/#sec-properties-of-the-map-prototype-object	https://mdn.io/rest_parameters
http://www.ecma-international.org/ecma-262/7.0/#sec-function.prototype.apply	https://mdn.io/spread_operator
https://mdn.io/Structured_clone_algorithm	https://mdn.io/Number/isFinite
https://mdn.io/Number/isInteger	http://ecma-international.org/ecma-262/7.0/#sec-tolength
http://www.ecma-international.org/ecma-262/7.0/#sec-ecmascript-language-types	https://mdn.io/Number/isNaN
https://mdn.io/isNaN	https://www.npmjs.com/package/babel-polyfill
https://mdn.io/Number/isSafeInteger	http://www.ecma-international.org/ecma-262/7.0/#sec-tointeger
https://mdn.io/Object/assign	https://en.wikipedia.org/wiki/CamelCase
https://en.wikipedia.org/wiki/Latin-1_Supplement_	https://en.wikipedia.org/wiki/Latin_Extended-A
https://mths.be/he	https://mathiasbynens.be/notes/ambiguous-ampersands
http://wonko.com/post/html-escaping	https://en.wikipedia.org/wiki/Letter_case#Special_case_styles
https://es5.github.io/#x15.1.2.2	https://mdn.io/String/replace
https://en.wikipedia.org/wiki/Snake_case	https://mdn.io/String/split
https://en.wikipedia.org/wiki/Letter_case#Stylistic_or_specialised_usage	http://www.html5rocks.com/en/tutorials/developertools/sourcemaps/#toc-sourceurl
https://lodash.com/custom-builds	https://developer.chrome.com/extensions/sandboxingEval
http://ejohn.org/blog/javascript-micro-templating/	https://github.com/olado/doT
https://mdn.io/toLowerCase	https://mdn.io/toUpperCase
http://requirejs.org/docs/errors.html#mismatch	https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/String/Trim#Polyfill

Page 1 of 2

Raw Manifest

{
  "name": "ACE Threshold Tracker",
  "icons": {
    "16": "logo192.png",
    "48": "logo192.png",
    "128": "logo192.png"
  },
  "version": "0.33",
  "background": {
    "service_worker": "./static/js/nonReact/background.js"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "A better way to track ACE completions",
  "permissions": [
    "management"
  ],
  "content_scripts": [
    {
      "js": [
        "./static/js/content.js",
        "./static/js/main.js"
      ],
      "css": [
        "./static/css/main.css"
      ],
      "matches": [
        "https://www2.dentistry.unc.edu/secure/assessment/studentassessmentall.cfm",
        "https://www2.dentistry.unc.edu/secure/assessment/studentassessmentAll.cfm",
        "https://dentalschool.unc.edu/secure/assessment/studentassessmentall.cfm",
        "https://dentalschool.unc.edu/secure/assessment/studentassessmentAll.cfm"
      ]
    },
    {
      "js": [
        "./static/js/nonReact/newForms/index.js"
      ],
      "css": [
        "./static/css/main.css"
      ],
      "matches": [
        "https://www2.dentistry.unc.edu/secure/assessment/ACEFormNew.cfm",
        "https://www2.dentistry.unc.edu/secure/assessment/aceformnew.cfm",
        "https://dentalschool.unc.edu/secure/assessment/ACEFormNew.cfm",
        "https://dentalschool.unc.edu/secure/assessment/aceformnew.cfm"
      ]
    }
  ],
  "manifest_version": 3
}

by ✦ Astarte