Auto Refresh Plus

Auto Refresh Plus

ID: ffejlioijcokmblckiijnjcmfidjppdn

Supported Languages

🇪🇹Amharic
🇸🇦Arabic
🇧🇩Bengali
🇧🇷Brazilian Portuguese
🇬🇧British English
🇧🇬Bulgarian
🇪🇸Catalan
🇨🇳Chinese (Simplified)
🇹🇼Chinese (Traditional)
🇭🇷Croatian
🇨🇿Czech
🇩🇰Danish
🇳🇱Dutch
🇺🇸English
🇪🇪Estonian
🇵🇭Filipino
🇫🇮Finnish
🇫🇷French
🇩🇪German
🇬🇷Greek
🇮🇳Gujarati
🇮🇱Hebrew
🇮🇳Hindi
🇭🇺Hungarian
🇮🇩Indonesian
🇮🇹Italian
🇯🇵Japanese
🇮🇳Kannada
🇰🇷Korean
🇲🇽Latin American Spanish
🇱🇻Latvian
🇱🇹Lithuanian
🇲🇾Malay
🇮🇳Malayalam
🇮🇳Marathi
🇳🇴Norwegian
🇮🇷Persian
🇵🇱Polish
🇵🇹Portuguese
🇷🇴Romanian
🇷🇺Russian
🇷🇸Serbian
🇸🇰Slovak
🇸🇮Slovenian
🇪🇸Spanish
🇰🇪Swahili
🇸🇪Swedish
🇮🇳Tamil
🇮🇳Telugu
🇹🇭Thai
🇹🇷Turkish
🇺🇦Ukrainian
🇺🇸US English
🇻🇳Vietnamese

Extension Info & Metadata

Status
Active
Version
3.0.2
Size
0.13 MB
Rating
4.8/5
Reviews
1,600
Users
100,000
Type
Extension
Updated
Jul 10, 2026
Category
Workflow & planning
Price
Free
Featured
Yes
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes

Publisher Contextual Analysis

Trusted
Author
autorefreshplus.inView Profile
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Website
Visit
Total Extensions
1
Active
1
Obsolete
0
Listed
1
Unlisted
0
Total Users
100,000
Screenshot 1
Screenshot 2

Auto Refresh Plus automatically refresh and reload any page or tab after a specified number of seconds

Auto Refresh Chrome Extension: This browser extension allows users to refresh a webpage automatically at specified intervals. It helps to save time and stay updated with dynamic content without manual intervention. The user can set the refresh frequency and customize the extension as per their requirements. The extension has a user-friendly interface and is easy to use. It can help improve productivity and efficiency while browsing the web. Enhance your workflow and increase productivity with this top-ranked, easy-to-use Auto Refresh Extension for Google Chrome. Improve your web browsing experience and stay up to date with dynamic content without the need for manual intervention. How it Works: 1. Open the popup and enter the time interval, at which the page has to refresh. 2. Then start the auto refresh. 3. Now the page refreshes at the entered time interval, until you stop or close the page. **We only collect the bare minimum of data required to give you the best user experience. Your data will be only used for optimizing functionality and will not be shared with third parties. Checkout our privacy policy to learn more. IMPORTANT: We do not collect any personally identifiable information**

Item
Type
Severity
Description
<all_urls>
Host
Critical
Broad host access — the extension can read/modify content on every website.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 10% increase: Early script execution enables pre-emptive content manipulation
Broad Host Permissions
Risk Factor
High
This extension has broad host permissions allowing it to access many or all websites.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
Early Content Script Execution
Risk Factor
Medium
This extension runs content scripts at document_start.

On every extension update the background worker sets `privacyOff = true` in local storage (line 131), which exists nowhere else in the extension's declared storage keys and is consistent with a user-facing privacy toggle. However, the `pageview` message handler (lines 82–94) unconditionally calls `reportAction` — which POSTs the full page URL, referrer, timestamp, and a persistent UUID to the publisher's analytics endpoint — without ever reading or checking `privacyOff`. This renders any privacy opt-out mechanism inoperative: users who updated from a prior version (and received `privacyOff = true`) continue to have every page visit silently reported.

background.js (Line 124)
} else if ("update" == a) {  await setToStorage("tabs", []), await setToStorage("popupTabs", []), await setToLocalStorage("privacyOff", !    0), await getFromLocalStorage("uid") || await setToLocalStorage("uid", e)}});// ...} else if ("pageview" === o) {  if (a?.tab?.incognito) return;  const e = t.uri,    o = t.docref || "",    r = t.navType || "",    s = a?.tab?.id;  if (!isValidPage(e)) return;  if ("reload" === r && null != s) {    if ((await getFromStorage("tabs") || [])      .some((t => t.tabId === s))) return  }  const n = await getFromLocalStorage("uid");  await reportAction(e, o, n, s)}

By severity

Critical0
High2
Medium3
Low0

Versions scanned

Showing 1 of 13 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension VersionCode Review Findings
3.0.04

Files with findings

1 distinct path — top paths by unique finding count:

  • background.js5
S.No.
Category
Severity
File
Summary
Found in Version
1Tracking
high
background.js (line 117)A persistent pseudo-random UID is generated at install time and stored in chrome.storage.local, then attached to every analytics POST. This gives the extension operator a stable per-user identifier correlating the ful…
2Unauthorized Data Collection
high
background.js (line 76)Every completed tab navigation across all sites (<all_urls>) is exfiltrated to https://autorefreshplus.in/api/v1/analytics together with the previous URL (referrer) and a persistent randomly-generated UID stored in ch…
3Obfuscation
medium
background.js (line 76)The exfiltration request JSON-serializes the payload and then base64-encodes it with btoa() before POSTing, despite declaring Content-Type: application/json. Wrapping the body in base64 serves no functional purpose an…
4Other
medium
background.js (line 124)On every extension update the background worker sets `privacyOff = true` in local storage (line 131), which exists nowhere else in the extension's declared storage keys and is consistent with a user-facing privacy tog…
5Tracking
medium
background.js (line 76)The analytics POST uses credentials: "include", which attaches autorefreshplus.in cookies to every request. Combined with the persistent uid, this allows the operator to cross-reference anonymous browsing telemetry wi…
URLs
10
IPv4
0
IPv6
0

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

Gain full insight into all external connections.

Upgrade for full visibility.

autorefreshplus.in-https://autorefreshplus.in
fonts.googleapis.com/css2https://fonts.googleapis.com/css2?family=Rubik:ital,wght@0,300;0,400;0,500;0,600;0,700;1,300;1,400;1,500;1,600;1,700&display=swap
react.dev/errors/https://react.dev/errors/
www.w3.org/2000/svghttp://www.w3.org/2000/svg
www.w3.org/1998/Math/MathMLhttp://www.w3.org/1998/Math/MathML
www.w3.org/1999/xlinkhttp://www.w3.org/1999/xlink
www.w3.org/XML/1998/namespacehttp://www.w3.org/XML/1998/namespace
git.io/JUIaEhttps://git.io/JUIaE#
chrome.google.com/webstore/detail/ffejlioijcokmblckiijnjcmfidjppdn/reviewshttps://chrome.google.com/webstore/detail/ffejlioijcokmblckiijnjcmfidjppdn/reviews
autorefreshplus.in/privacyhttps://autorefreshplus.in/privacy

Gain full insight into all external connections.

Upgrade for full visibility.

No IP addresses found
Showing 1 to 10 of 20 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files (scanned top 25 shared text files)

No comparable text files found between these versions.

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.