[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

The Great-er Tab Discarder

Version 1.4.0 View in Chrome Web Store

Last scanned: about 6 hours ago

Extension Details

Rating: 4.3 ★ (46 ratings)

Users: 10,000

Context-Aware Verdict

MEDIUM

Overall Risk

Trust Factors: The extension has a reasonable user base of 10,000 users and maintains a solid 4.3-star rating from 46 reviews, indicating general user satisfaction. The name clearly describes its purpose as a tab management tool, which aligns with the requested permissions. However, the lack of visible developer information reduces transparency and accountability.

Concerns: The primary concern is the tabs permission, which grants broad access to browser tab information and manipulation capabilities. While necessary for a tab discarder's core functionality, this permission could potentially be misused to monitor browsing habits, access sensitive tab data, or manipulate tabs maliciously. The storage permission, though standard for maintaining user preferences, could be used to persist unwanted data. The contextMenus permission appears appropriate for user interface integration but adds another attack surface.

The absence of host permissions is positive, suggesting the extension doesn't need to access website content directly. However, the favicon permission combined with tabs access could enable tracking of visited sites.

Recommendations: Consider running this extension in a separate Chrome profile if you handle sensitive information in your browser. Regularly review the extension's behavior and check for any unusual tab manipulation. Monitor your browser's performance and tab behavior after installation. Given the legitimate use case and reasonable user feedback, the extension appears functional, but the powerful tabs permission warrants cautious use.

Findings

HIGH

High-Risk Permission: tabs

This extension has the tabs permission. Can access browser tab information and manipulate tabs. This could potentially be used maliciously to compromise security or privacy.

MEDIUM

Medium-Risk Permission: contextMenus

This extension has the contextMenus permission. Can add items to the context menu.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Security Analysis Details

Required Permissions:

tabs
storage
contextMenus
alarms
favicon

Optional Permissions:

tabGroups

Embedded URLs (18 total):

https://clients2.google.com/service/update2/crx	http://fontawesome.io
http://fontawesome.io/license	https://chromewebstore.google.com/detail/the-great-er-tab-discarder/plpkmjcnhhnpkblimgenmdhghfgghdpp
https://microsoftedge.microsoft.com/addons/detail/the-greater-tab-discarder/lieejiddoadedggjdkgeellgeeibbnai	https://github.com/rkodey/the-great-er-discarder-er/issues
https://github.com/rkodey/the-great-er-discarder-er/blob/main/CHANGELOG.md	https://github.com/aaronpowell/db.js
https://play.google.com/music/listen	https://mail.google.com
http://www.w3.org/2000/svg	http://www.w3.org/1999/xlink
https://bugzilla.mozilla.org/show_bug.cgi?id=872873	http://stackoverflow.com/questions/36225779/aborterror-within-indexeddb-upgradeneeded-event/36266502
https://bugzilla.mozilla.org/show_bug.cgi?id=1220279	https://github.com/ariya/phantomjs/issues/14141
https://www.google.com	https://www.github.com

Raw Manifest

{
  "name": "The Great-er Tab Discarder",
  "icons": {
    "16": "img/icon16.png",
    "48": "img/icon48.png",
    "128": "img/icon128.png"
  },
  "action": {
    "default_icon": "img/icon19.png",
    "default_popup": "html/popup.html",
    "default_title": "The Great-er Tab Discarder"
  },
  "version": "1.4.0",
  "commands": {
    "1-discard-tab": {
      "description": "Discard active tab",
      "suggested_key": {
        "default": "Ctrl+Shift+D"
      }
    },
    "2-suspend-tab": {
      "description": "Suspend active tab",
      "suggested_key": {
        "default": "Ctrl+Shift+S"
      }
    },
    "6-reload-all-windows": {
      "description": "Reload all tabs in all windows"
    },
    "5-discard-all-windows": {
      "description": "Discard all tabs in all windows"
    },
    "4-reload-active-window": {
      "description": "Reload all tabs in active window"
    },
    "3-discard-active-window": {
      "description": "Discard all tabs in active window"
    }
  },
  "incognito": "split",
  "background": {
    "type": "module",
    "service_worker": "js/eventPage.js"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Compatible with latest Chrome! Helps your browser load and run faster by freeing up memory and resources used by old inactive tabs.",
  "permissions": [
    "tabs",
    "storage",
    "contextMenus",
    "alarms",
    "favicon"
  ],
  "options_page": "html/options.html",
  "manifest_version": 3,
  "optional_permissions": [
    "tabGroups"
  ],
  "minimum_chrome_version": "108",
  "web_accessible_resources": [
    {
      "matches": [
        "<all_urls>"
      ],
      "resources": [
        "html/suspended.html",
        "img/*",
        "_favicon/*"
      ]
    }
  ]
}

by ✦ Astarte

The Great-er Tab Discarder

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Optional Permissions:

Embedded URLs (18 total):

Raw Manifest

Detections

Manifest Findings