dicom.link Dicom Viewer

Version 0.9.9 View in Chrome Web Store

Last scanned: 20 days ago | force re-scan

Extension Details

Developer: INTERACTIVE HEALTHCARE TECHNOLOGIES SRL

Rating: 5.0 ★ (3 ratings)

Users: 1,000

Context-Aware Verdict

HIGH

Overall Risk

Based on 3 total findings, including 2 high-risk findings.

Findings

HIGH

High-Risk Permission: identity

This extension has the identity permission. Can access your identity information. This could potentially be used maliciously to compromise security or privacy.

HIGH

Unsafe WebAssembly Execution

This extension's Content Security Policy allows 'wasm-unsafe-eval', which permits potentially dangerous WebAssembly code execution. This could be used to hide malicious code or perform CPU-intensive operations.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Security Analysis Details

Required Permissions:

identity
identity.email
storage

Content Security Policy:

extension_pages: script-src 'self' 'wasm-unsafe-eval'; worker-src 'self'; object-src 'self'

Embedded URLs (24 total):

https://github.com/BIDS/colormap/blob/master/colormaps.py	http://www.kitware.com/Copyright.htm
http://www.w3.org/2000/svg	https://local.invalid
http://dicom.nema.org/medical/dicom/current/output/chtml/part03/sect_C.7.6.3.html	https://dicom.link
https://dicom.link/api/heartbeat/keepalive?dicomviewer&id=	https://developer.mozilla.org/en-US/docs/Web/API/XMLHttpRequest/Synchronous_and_Asynchronous_Requests
https://emscripten.org/docs/getting_started/FAQ.html#how-do-i-run-a-local-webserver-for-testing-why-does-my-program-stall-in-downloading-or-preparing	https://clients2.google.com/service/update2/crx
https://www.googleapis.com/auth/userinfo.email	https://www.googleapis.com/auth/userinfo.profile
https://dicom.link/api/3	https://dicom.link/contact
https://dicom.link/pricing	https://dicom.link/api/3/uitexts
https://dicom.link/api/3/dvl	https://secure.dicom.link/api/3/extension/auth/verify
https://secure.dicom.link/api/3/extension/checkout	http://w2ui.com
https://www.jsdelivr.com/using-sri-with-dynamic-files	http://pajhome.org.uk/crypt/md5
https://github.com/vitmalina/w2ui/issues/914#issuecomment-107340524	https://github.com/vitmalina/w2ui/issues/911#issuecomment-107341193

Raw Manifest

{
  "name": "dicom.link Dicom Viewer",
  "icons": {
    "16": "appicon16x16.png",
    "48": "appicon48x48.png",
    "128": "appicon128x128.png"
  },
  "action": {},
  "oauth2": {
    "scopes": [
      "https://www.googleapis.com/auth/userinfo.email",
      "https://www.googleapis.com/auth/userinfo.profile"
    ],
    "client_id": "228703166788-4hqb87mvdr9alejgacrk57eerem9rfsa.apps.googleusercontent.com"
  },
  "version": "0.9.9",
  "background": {
    "service_worker": "eventPage.js"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Advanced DICOM viewer. dicom.link services frontend (DicomProxy, SecurePACS)",
  "permissions": [
    "identity",
    "identity.email",
    "storage"
  ],
  "homepage_url": "https://dicom.link",
  "manifest_version": 3,
  "optional_permissions": [],
  "content_security_policy": {
    "extension_pages": "script-src 'self' 'wasm-unsafe-eval';  worker-src 'self'; object-src 'self'"
  }
}

by ✦ Astarte

dicom.link Dicom Viewer

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Content Security Policy:

Embedded URLs (24 total):

Raw Manifest

Detections

Manifest Findings