Extension Auditor
Extension Auditor
Sign Up
BALI - Booking Affiliate Link Integrator

BALI - Booking Affiliate Link Integrator

ID: dhhnamolcbeaofalhfbkmdmgkajieopo

Supported Languages

🇺🇸US English

Extension Info & Metadata

Status
Active
Version
0.3.0
Size
0.01 MB
Rating
0.0/5
Reviews
0
Users
31
Type
Extension
Updated
Mar 18, 2025
Category
Shopping
Price
Free
Featured
No
Visibility
Unlisted
Mature
No
By Google
No
Trusted
Yes
Download CRX
Chrome Web Store
Report Issue

Publisher Contextual Analysis

Trusted
Author
Solutions by SAView Profile
Privacy
Privacy Policy
Country
United States
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Address
123 Main Street New York City, NY 11111 United States
Website
Visit
Total Extensions
1
Active
1
Obsolete
0
Listed
0
Unlisted
1
Total Users
31
Screenshot 1

Automatically adds Booking.com's Affiliate Tracking Id to webpages ensuring that bookings are credited to affiliates.

By setting your Booking.com’s Affiliate ID (AID) in the popup window (simply click the extension’s icon), when a web page is loaded, the extension automatically applies your AID to the URL, helping you to get credited with the booking. You will also receive credit for hotel bookings using your own affiliate id. Disclaimer: * This extension was not created or endorsed by Booking.com. * This extension is not associated with or sponsored by Booking.com.

Item
Type
Severity
Description
declarativeNetRequest
Permission
Critical
This permission allows the extension to define rules to block, redirect, or modify network requests. Rated Critical because it can control all network traffic, potentially blocking security updates or redirecting to malicious sites.
<all_urls>
Host
Critical
Broad host access — the extension can read/modify content on every website.
Broad Host Permissions
Risk Factor
High
This extension has broad host permissions allowing it to access many or all websites.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.

The bundled manifest declares `<all_urls>` as host_permissions, granting read/modify access to every URL the user visits, whereas the live CWS-published manifest restricts this to `*://*.booking.com/*`. This discrepancy means the installed extension holds a materially broader permission than what Google reviewed and approved. While no code currently exploits the extra scope, the mismatch is itself a policy violation and creates surface area for future misuse if the extension is silently updated.

manifest.json (Line 19)
{  "host_permissions": [    "<all_urls>"  ]}

By severity

Critical0
High1
Medium0
Low0

Versions scanned

None of the 3 scanned versions have more than one unique code-review finding. Counts are unique findings that include each version.

Extension VersionCode Review Findings
No versions with multiple unique findings.

Files with findings

1 distinct path — top paths by unique finding count:

  • manifest.json1
S.No.
Category
Severity
File
Summary
Found in Version
1Other
high
manifest.json (line 19)The bundled manifest declares `<all_urls>` as host_permissions, granting read/modify access to every URL the user visits, whereas the live CWS-published manifest restricts this to `*://*.booking.com/*`. This discrepan…
0.3.0
URLs
22
IPv4
0
IPv6
0

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In
github.com/Semantic-Org/Semantic-UIhttps://github.com/Semantic-Org/Semantic-UI
www.semantic-ui.com-http://www.semantic-ui.com/
opensource.org/licenses/MIThttp://opensource.org/licenses/MIT
fonts.googleapis.com/csshttps://fonts.googleapis.com/css?family=Lato:400,700,400italic,700italic&subset=latin
github.com/semantic-org/semantic-ui/http://github.com/semantic-org/semantic-ui/
fontello.comfont-http://fontello.comFont
fontawesome.com-https://fontawesome.com
fontawesome.com/licensehttps://fontawesome.com/license
www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtdhttp://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd
www.w3.org/2000/svghttp://www.w3.org/2000/svg
Showing 1 to 10 of 30 rows
Rows per page:

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In
No IP addresses found
Showing 1 to 3 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files (scanned top 25 shared text files)

No comparable text files found between these versions.

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In