Extension Auditor
Extension Auditor
Sign Up
Send to Google Tasks

Send to Google Tasks

ID: acomfpnllcpggnclcogaiceicgljnbac

Supported Languages

🇺🇸US English

Extension Info & Metadata

Status
Active
Version
1.7
Size
0.09 MB
Rating
4.1/5
Reviews
27
Users
6,000
Type
Extension
Updated
Sep 17, 2024
Category
Workflow & planning
Price
Free
Featured
Yes
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
Download CRX
Chrome Web Store
Report Issue

Publisher Contextual Analysis

Trusted
Author
https://send-to-google-tasks.github.io/View Profile
Privacy
Privacy Policy
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Website
Visit
Total Extensions
1
Active
1
Obsolete
0
Listed
1
Unlisted
0
Total Users
6,000
Screenshot 2

Send the page you are reading to Google Tasks

Send to Google Tasks is a chrome extension that performs one simple thing: it send the page or link from your chrome browser to Google Tasks. Change log: - v1.7 @ 2023-12-02: allow setting default due date via option menu. - v1.6 @ 2023-05-19: white outline icon is now available via option menu. - v1.5 @ 2023-03-10: provide visual hint in badge when saving task. - v1.4 @ 2022-11-26: support browsers other than Google Chrome, like Microsoft Edge. - v1.3 @ 2022-11-24: use manifest v3. Attribution for the icons and graphics: - Icons are made by Pixel perfect (https://www.flaticon.com/authors/pixel-perfect) from Flaticon (https://www.flaticon.com).

Item
Type
Severity
Description
identity
Permission
High
This permission accesses Chrome identity service and user information. Rated High because it can obtain OAuth tokens, access connected accounts, and impersonate the user in authenticated service.
activeTab
Permission
Medium
This permission grants temporary access to the current tab. Rated Medium because it can access current page content when invoked, though limited to user-initiated actions.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
contextMenus
Permission
Low
This permission adds items to browser context menus. Rated Medium because it only modifies right-click menus without access to page content.
notifications
Permission
Low
This permission displays system notifications. Rated Low because it can only show user-visible notifications without accessing system data.

By severity

Critical0
High0
Medium2
Low1

Versions scanned

Showing 1 of 8 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension VersionCode Review Findings
1.53

Files with findings

2 distinct paths — top paths by unique finding count:

  • background.js2
  • options.js1
S.No.
Category
Severity
File
Summary
Found in Version
1Credential Theft
medium
background.js (line 56)The extension declares one OAuth client ID in manifest.json (`639946696688-cc30572ddrbb77dpqu9nf5fugitg9o9c`) but silently falls back to a completely different hardcoded client ID (`639946696688-o895ocvjk5dq1ra0ggmh81…
1.5
2Credential Theft
medium
options.js (line 21)The options page duplicates the same dual-client fallback logic from background.js, confirming the pattern is deliberate rather than an accidental copy. The same undisclosed secondary OAuth client ID is used to obtain…
1.5
3Other
low
background.js (line 26)A dead `return` statement on line 29 immediately follows another `return`, making it permanently unreachable. While not malicious on its own, unreachable code is a code quality indicator sometimes associated with copy…
1.5
URLs
12
IPv4
0
IPv6
0

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In
www.w3.org/1999/02/22-rdf-syntax-nshttp://www.w3.org/1999/02/22-rdf-syntax-ns#
ns.adobe.com/tiff/1.0/http://ns.adobe.com/tiff/1.0/
ns.adobe.com/xap/1.0/http://ns.adobe.com/xap/1.0/
ns.adobe.com/exif/1.0/http://ns.adobe.com/exif/1.0/
www.googleapis.com/auth/taskshttps://www.googleapis.com/auth/tasks
accounts.google.com/o/oauth2/authhttps://accounts.google.com/o/oauth2/auth?client_id=${webClient}&response_type=token&redirect_uri=${encodeURIComponent(redirect
tasks.googleapis.com/tasks/v1/users/@me/listshttps://tasks.googleapis.com/tasks/v1/users/@me/lists
tasks.googleapis.com/tasks/v1/lists/$%7Btasklist%7D/tasks%60,https://tasks.googleapis.com/tasks/v1/lists/${tasklist}/tasks`,
tasks.google.com/embed/list/$%7Batob(tasklisthttps://tasks.google.com/embed/list/${atob(tasklist
calendar.google.com&fullwidth=1`;-https://calendar.google.com&fullWidth=1`;
Showing 1 to 10 of 20 rows
Rows per page:

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In
No IP addresses found
Showing 1 to 8 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files (scanned top 25 shared text files)

No comparable text files found between these versions.

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In