ノイズレスサーチ+

ノイズレスサーチ+

ID: gmpgngmmcocpbfagngjgoccchlnhmphn

Extension Info & Metadata

Status
Active
Version
1.3
Size
0.04 MB
Rating
5.0/5
Reviews
4
Users
10,000
Type
Extension
Updated
Jun 21, 2022
Category
Tools
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes

Publisher Contextual Analysis

Trusted
Author
YumetoView Profile
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Total Extensions
2
Active
2
Obsolete
0
Listed
2
Unlisted
0
Total Users
10,014
Screenshot 1

ノイズレスサーチの検索エンジンを利用して、正確な情報に簡単にアクセスできる拡張機能です。

Google検索の結果に邪魔なサイトが多くて、欲しい情報にすぐに辿り着けないなんて経験ありませんか? そんな時にはパソ活ラボ様のノイズレスサーチが非常に便利です。 ノイズレスサーチ+は、そのノイズレスサーチの検索結果に素早くアクセスできるChrome拡張機能です。 使い方は非常にシンプルで、 1. alt+N(Windows)、またはoption+N(Mac) (またはアイコンをクリック) 2. 検索窓に検索文字列を入力 3. Enterキーを押す (または検索ボタンをクリック) だけです。 ドメイン絞り込みに関しましては、以下のパソ活ラボ様のサイトをご参照ください。 http://pasokatu.com/14565#site ■ 履歴 2022/06/13 - V1.3 - プログラムポリシーの更新に準拠 2019/09/23 - V1.2 - 右クリックメニュー追加 2018/05/03 - V1.1 - 公開

Item
Type
Severity
Description
contextMenus
Permission
Low
This permission adds items to browser context menus. Rated Medium because it only modifies right-click menus without access to page content.

User-selected page text (info.selectionText) is sent via plaintext HTTP (not HTTPS) to a third-party domain pasokatu.com as a URL fragment when the context-menu item is clicked. While this is the extension's stated search function, transmitting potentially sensitive selected text in cleartext exposes it to network observers and the third-party operator. The string is also concatenated into a URL without encoding (no encodeURIComponent), allowing arbitrary URL/fragment injection from selected text.

background.js (Line 1)
function search(type, filter, words) {  var urlstr = new String('http://pasokatu.com/nsearch#gsc.tab=[type]&gsc.q=[words]&gsc.sort=');  urlstr = urlstr.replace('[words]', words);  if (type == 'web') {    urlstr = urlstr.replace('[type]', '0')  } else if (type == 'img') {    urlstr = urlstr.replace('[type]', '1')  }  ...  chrome.tabs.create({    url: urlstr  });};...chrome.contextMenus.onClicked.addListener(function(info, tab) {  search('web', 'tab_all', info.selectionText);})

By severity

Critical0
High0
Medium0
Low1

Versions scanned

None of the 2 scanned versions have more than one unique code-review finding. Counts are unique findings that include each version.

Extension VersionCode Review Findings
No versions with multiple unique findings.

Files with findings

1 distinct path — top paths by unique finding count:

  • background.js1
S.No.
Category
Severity
File
Summary
Found in Version
1Tracking
low
background.js (line 1)User-selected page text (info.selectionText) is sent via plaintext HTTP (not HTTPS) to a third-party domain pasokatu.com as a URL fragment when the context-menu item is clicked. While this is the extension's stated se…
URLs
2
IPv4
0
IPv6
0

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

Gain full insight into all external connections.

Upgrade for full visibility.

pasokatu.com/nsearchhttp://pasokatu.com/nsearch#gsc.tab=[type
clients2.google.com/service/update2/crxhttps://clients2.google.com/service/update2/crx

Gain full insight into all external connections.

Upgrade for full visibility.

No IP addresses found
Showing 1 to 2 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files (scanned top 25 shared text files)

No comparable text files found between these versions.

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.