FoxyProxy Edge extension security report

FoxyProxy is an open-source, advanced proxy management tool that completely replaces Edge's limited proxying capabilities. No paid accounts are necessary; bring your own proxies or buy from any vendor. The original proxy tool, since 2006. FoxyProxy has been owned and developed consistently by the same team since 2006. It has never been sold and never will. WHAT IS IT? FoxyProxy is a browser extension which switches an internet connection across one or more proxy servers: 1. by point-and-click of colored icons 2. by URL (define URL patterns with wildcards or regular expressions) 3. by browser tab - set individual proxies per tab: assign up to 4 proxy servers for use on 4 different tabs. FoxyProxy automates the manual process of editing your browser's proxy settings. * Customize colors and country flags to make it easy to see which proxy is in use * Proxy per tab, by URL, or by point-and-click of colored icons * Import/Export all of your settings, or just URL patterns, to share with others (fixed in 8.0 and above) * Select a proxy specifically to use in Incognito Mode * Keyboard shortcuts * Globally exclude any domain from proxying * Create patterns with wildcards or regular expressions. A pattern tester is included. * (optional) Automatically synchronize all of your proxy settings with your other browser instances when you use Sync. * Turn WebRTC on/off to further limit discovery of your IP address * Built-in predefined selections for tor, privoxy, and psiphon * Extensive built-in help Source code is at https://github.com/foxyproxy/browser-extension FoxyProxy has been owned and developed consistently by the same team since 2006. It has never been sold and never will. PERMISSIONS * downloads: Required to export the extension settings to a file. Users can import that file to other browser instances, or share it with colleagues, in order to keep the same settings. It can also be backed up and used later. * proxy: The core function of the extension is to allow users to set the proxy server used by the browser. * storage: Required to store proxy server settings (hostname, port, username, and which proxy server is enabled by the user). * tabs: Required so that users can set separate proxies to use per tab. It is also needed for "QuickAdd" to quickly add a URL pattern that applies to the current/active tab. It is also used to open a URL to getfoxyproxy.org where there is online help. webRequest: Required to authenticate with proxy servers via webRequest.onAuthRequired webRequestAuthProvider: Required to authenticate with proxies servers via webRequest.onAuthRequired * browsingData: Required so the extension can delete cookies, indexedDB, and localStorage when requested by the user on the Options page (Delete Browsing Data button) privacy: Required so the extension can call browser.privacy.network.webRTCIPHandlingPolicy to turn on/off webRTC in Edge/Chrome (Limit WebRTC checkbox in Options page) * host permission: Required to proxy all webRequests and provide proxy server authentication. <all_urls> is used because users may choose to load any/all URLs through proxy servers (chrome.webRequest.onAuthRequired and chrome.webRequest.onAuthRequired.addListener) . Required to proxy all webRequests and provide proxy server authentication. Also needed to get accounts details from FoxyProxy servers, if requested by the user with the Import FoxyProxy Account on the Import tab. ** No remote code is used in this extension. ** * Why is there a crypto javascript library in the extension? This crypto library is needed to migrate encrypted settings from version 3.x to version 8.x. It is not used to encrypt anything; only to decrypt old data when upgrading from version 3.x -> 8.x.