Security Warning: High Security Risk

Automated analysis found severe security findings in this version. Review the Security Analysis tab before trusting this extension.Extension: 易用侧边栏 Pro - 一个窗口同时打开两个页面

HIGH RISK

易用侧边栏 Pro - 一个窗口同时打开两个页面

ID: gnmokfnnmiogbienadgnimmgpjgollen

Supported Languages

🇨🇳Chinese (Simplified)

Extension Info & Metadata

Status

Active

Version

1.0.6

Size

0.14 MB

Rating

4.5/5

Reviews

Users

4,000

Type

Extension

Updated

Aug 31, 2023

Publisher Contextual Analysis

Author: sidepanel288View Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

4,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

在一个窗口内同时打开两个页面，方便参照和对比。我们将访问您的topSites（most visited sites），用于快捷的在sidepanel中打开您常访问的网站

One window displays two pages for easy reference and comparison. Watch tv ,reply email and so on.

User Growth

Showing data from Aug 31, 2023 to Aug 29, 2024

Versions

-25%(-1,000 users)

Compared to 3 months ago

1 version released in this period

Rating Count

Total: 2 ratings

Average Rating

Current: 4.00 / 5.0+4.00

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High2

Medium2

Low0

Versions scanned

Showing 1 of 1 scanned version with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.0.6 Code review	4

Extension Version	Code Review Findings
1.0.6	4

Files with findings

3 distinct paths — top paths by unique finding count:

sidepanel.bundle.js2
manifest.json1
rules.json1

S.No.	Category	Severity	File	Summary	Found in Version
1	Privilege Escalation	high	rules.json (line 1)	The extension strips X-Frame-Options and Content-Security-Policy response headers from ALL sub-frame requests globally (urlFilter: "*"). X-Frame-Options prevents clickjacking and CSP is the primary browser defense aga…	1.0.6
2	Tracking	high	sidepanel.bundle.js (line 18155)	The extension generates a persistent UUID on first run, stores it in chrome.storage.local, and sends it alongside the extension's own runtime ID to Google Analytics Measurement Protocol on every panel open, using a ha…	1.0.6
3	Privilege Escalation	medium	manifest.json (line 43)	Every file inside the extension package is declared as a web-accessible resource accessible to any URL on the internet. This means any malicious web page can probe the extension's internal bundle files (including side…	1.0.6
4	Unauthorized Data Collection	medium	sidepanel.bundle.js (line 22763)	The extension calls chrome.history.search with every character the user types into the address bar inside the side panel (debounced at 500ms) and passes the full results array to console.log. While the history search …	1.0.6

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx
*	/*	http:///
*	/*	https:///
reactjs.org	/docs/error-decoder.html	https://reactjs.org/docs/error-decoder.html?invariant=
www.w3.org	/1999/xlink	http://www.w3.org/1999/xlink
www.w3.org	/XML/1998/namespace	http://www.w3.org/XML/1998/namespace
www.w3.org	/1999/xhtml	http://www.w3.org/1999/xhtml
www.w3.org	/1998/Math/MathML	http://www.w3.org/1998/Math/MathML
www.w3.org	/2000/svg	http://www.w3.org/2000/svg
mui.com	/production-error/	https://mui.com/production-error/?code=

Showing 1 to 10 of 30 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

3.7 out of 5 · 9 most recent reviews

Text reviews

Positive

Negative

第一次给评价，非常好用的拓展

jie zheng·19 Jan 2025

UI可以再美化一下，有些许简陋，功能几乎完美，加上侧边栏点击主窗打开就好了，要是再多做个悬浮窗就更完美了

江

江有汜·2 Dec 2024

能否实现侧边栏中点击，就在侧边��中打开，而不是在主窗口打开... 否则这个功能就很鸡肋了

Mr Peng·23 Feb 2024

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Warning: High Security Risk

易用侧边栏 Pro - 一个窗口同时打开两个页面

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

Screenshots & Videos

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 1 Version4

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating