Edge Add-ons
2Versions
0Code reviewed

Not reviewed

No code review on record

We have not reviewed this extension’s code, so we cannot vouch for it either way. Check the permissions below to decide whether it asks for more than it needs.

Want us to read this extension's code? Ask for a review and we'll queue it.

What our analysis found

CFCA SecEditCtl.SRCB Extension, used by 155,418 people, is not yet reviewed by Extension Auditor. It comes from a publisher with 5 extensions and was last updated in August 2024.

CFCA SecEditCtl.SRCB Extension

CFCA SecEditCtl.SRCB Extension Edge extension security report

ID: pmipfkdaofejncgcnblbibdjoencodig

Supported Languages

🇺🇸US English

Extension Info & Metadata

Status
Active
Version
3.2.0.5
Size
0.01 MB
Rating
2.3/5
Reviews
3
Users
155,418
Type
Extension
Updated
Aug 8, 2024
Category
Developer-tools
Price
Paid
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
No
This publisherTrack record
5extensions
All still listed

Publisher Contextual Analysis

Author
上海农村商业银行股份有限公司
Extensions
5
Active
5
Obsolete
0
Listed
5
Unlisted
0
Users
511,591

Install growth

Item
Type
Severity
Description
nativeMessaging
Permission
High
This permission enables communication with applications installed on your computer. Rated High because it can exchange data with native programs, potentially exposing system-level information and local files.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 10% increase: Early script execution enables pre-emptive content manipulation
Early Content Script Execution
Risk Factor
Medium
This extension runs content scripts at document_start.

Gain full insight into all external connections.

Upgrade for full visibility.

About this extension

CFCA Secure Edit Control Extension

Read the publisher’s full description

保护用户输入信息的安全性需要通过多重加密与可信验证机制实现。用户需预先安装由CFCA(中国金融认证中心)认证的专用安全应用程序,该程序内置经CFCA颁发的数字证书体系。当用户在网页或客户端输入密码时,应用程序通过实时监控技术截获输入行为,在系统内存层面对密码数据进行即时加密处理,全程确保明文密码不落盘、不暴露于网络传输层。 加密过程采用非对称加密算法(如RSA 2048或国密SM2),应用程序调用预置的CFCA公钥对密码进行加密,生成不可逆的密文数据包。该公钥与扩展程序持有的私钥形成密钥对,私钥存储于扩展程序的安全硬件模块中,确保无法被逆向破解。加密后的数据通过安全通道传输至浏览器扩展程序,扩展程序通过证书链验证确认数据来源的真实性,随后使用私钥进行解密验证。

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

No network indicators were extracted from this version.

Version
Size
Verdict
Findings
Permhash
3.2.0.3
Latest
0.01 MBNot scanned—
95826d4df80619d476a5ec0c67d07fe4b350e9e457fc6a1eccbd4b8166a98b73
3.2.0.5
0.01 MBNot scanned—
95826d4df80619d476a5ec0c67d07fe4b350e9e457fc6a1eccbd4b8166a98b73
Showing 1 to 2 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.

More from 上海农村商业银行股份有限公司