Print for Google Chrome™

ID: opjjddadfghiohofkllopkobjdgnnelp

Could be malicious

Supported Languages

🇧🇬Bulgarian
🇪🇸Catalan
🇨🇳Chinese (Simplified)
🇹🇼Chinese (Traditional)
🇭🇷Croatian
🇨🇿Czech
🇩🇰Danish
🇳🇱Dutch
🇺🇸English
🇪🇪Estonian
🇵🇭Filipino
🇫🇮Finnish
🇫🇷French
🇩🇪German
🇬🇷Greek
🇮🇳Hindi
🇭🇺Hungarian
🇮🇩Indonesian
🇮🇹Italian
🇯🇵Japanese
🇰🇷Korean
🇱🇻Latvian
🇱🇹Lithuanian
🇲🇾Malay
🇳🇴Norwegian
🇵🇱Polish
🇷🇴Romanian
🇷🇺Russian
🇷🇸Serbian
🇸🇰Slovak
🇸🇮Slovenian
🇪🇸Spanish
🇸🇪Swedish
🇹🇭Thai
🇹🇷Turkish
🇺🇦Ukrainian
🇻🇳Vietnamese

Extension Info & Metadata

Status
Removed
Version
3.1.0
Size
0.12 MB
Rating
3.9/5
Reviews
12
Users
8,759
Type
Extension
Updated
Sep 28, 2022
Category
7_productivity
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
No

Publisher Contextual Analysis

Author
https://print-extension.freebusinessapps.netView Profile
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Total Extensions
1
Active
0
Obsolete
1
Listed
1
Unlisted
0
Total Users
8,759

Print the current page with printer friendly customizable options

Print the current page you see with one single click Print for Google Chrome™ is a lightweight and useful extension designed to print out the current webpage quickly. You choose the style, you choose the Print button design. This browser extension is designed for touch screen, so you can print it from a local printer or use cloud print from one of your own Google Cloud Printers. A few great features in this browser extension: + Built for TOUCH screen and DESKTOP screens with mouse. + Print to PDF format instantly Use the right click mouse button to delete areas of the web page you do not want to print. You can also save printer ink by making a readable version of the webpage before choosing to print. Disclaimer: Please note this extension is NOT made by Google and is made by an independent development team. All copyrights belong to their respective owners. Google doesn’t endorse or sponsor this Chrome extension. Print for Google Chrome™ is not owned by, is not licensed by and is not a subsidiary of Google Inc. Update v1.2

Item
Type
Severity
Description
scripting
Permission
Critical
This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
activeTab
Permission
Medium
This permission grants temporary access to the current tab. Rated Medium because it can access current page content when invoked, though limited to user-initiated actions.

ContentPanel.setHtml assigns arbitrary HTML scraped from the active tab (via inject.js's document.documentElement.innerHTML) directly to a shadow root's innerHTML inside the extension's privileged main.html page. While <script> tags in innerHTML do not execute, inline event handler attributes (e.g. <img onerror>, <svg onload>) and javascript: URIs would fire in the extension's chrome-extension:// origin, giving the injected code access to chrome.* APIs available to the page (limited here to activeTab/scripting). The 'reset to original' path forwards the raw HTML without any sanitization; only the Readability path provides any cleaning.

js/ContentPanel.js (Line 45)
setHtml(html) {  const root = this.root;  root.innerHTML = html;  this.hiddenElements = [];  this.dispatchUndoEvent();}

By severity

Critical0
High0
Medium0
Low1

Versions scanned

None of the 2 scanned versions have more than one unique code-review finding. Counts are unique findings that include each version.

Extension VersionCode Review Findings
No versions with multiple unique findings.

Files with findings

1 distinct path — top paths by unique finding count:

  • js/ContentPanel.js1
S.No.
Category
Severity
File
Summary
Found in Version
1Code Injection
low
js/ContentPanel.js (line 45)ContentPanel.setHtml assigns arbitrary HTML scraped from the active tab (via inject.js's document.documentElement.innerHTML) directly to a shadow root's innerHTML inside the extension's privileged main.html page. Whil…
URLs
16
IPv4
0
IPv6
0

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

Gain full insight into all external connections.

Upgrade for full visibility.

microsoftedge.microsoft.com/addons/detail/%60https://microsoftedge.microsoft.com/addons/detail/`
chrome.google.com/webstore/detail/$%7Bid%7D/reviews%60;https://chrome.google.com/webstore/detail/${id}/reviews`;
getbootstrap.com-https://getbootstrap.com/
github.com/twbs/bootstrap/blob/main/LICENSEhttps://github.com/twbs/bootstrap/blob/main/LICENSE
www.w3.org/2000/svghttp://www.w3.org/2000/svg
www.apache.org/licenses/LICENSE-2.0http://www.apache.org/licenses/LICENSE-2.0
code.google.com/p/arc90labs-readabilityhttp://code.google.com/p/arc90labs-readability
developer.mozilla.org/en-US/docs/Web/API/Node/nodeTypehttps://developer.mozilla.org/en-US/docs/Web/API/Node/nodeType
schema.org/Articlehttps://schema.org/Article
github.com/whatwg/html/issues/4275,https://github.com/whatwg/html/issues/4275,
Showing 1 to 10 of 20 rows
Rows per page:

Gain full insight into all external connections.

Upgrade for full visibility.

No IP addresses found
Version
Size
Is Malicious
Findings
Permhash
1.2
Latest
0.08 MB
Malicious
3.1.0
0.12 MB
Malicious
1
Showing 1 to 2 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files (scanned top 25 shared text files)

No comparable text files found between these versions.

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.