| Contextual Risk Factors | Risk Factor | | The following context increases the overall risk:• 20% increase: Access to sensitive domains increases potential impact |
| storage | Permission | | This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads. |
| https://www.skyscanner.net/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.lastminute.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.kayak.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.ryanair.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.tripadvisor.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.booking.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.makemytrip.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.flightaware.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.tripadvisor.co.uk/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.mapquest.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.railyatri.in/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.tripadvisor.in/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.flightradar24.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.agoda.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.expedia.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.argentina.gob.ar/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.airbnb.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.tripadvisor.it/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.thetrainline.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.tripadvisor.es/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.jalan.net/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.tripadvisor.fr/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.traveloka.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.easyjet.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.waze.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.bahn.de/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.indianrail.gov.in/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.irctc.co.in/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.marriott.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.hotels.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.redbus.in/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.obilet.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.trip.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.rome2rio.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.moovitapp.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.sncf-connect.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.latamairlines.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.tui.co.uk/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.mappy.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.goibibo.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.delta.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.trenitalia.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.confirmtkt.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.uber.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.united.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.nps.gov/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.baliprov.go.id/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.tripadvisor.ca/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.ixigo.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.southwest.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.turkishairlines.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.tripadvisor.de/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.tripadvisor.com.br/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.klook.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.tokyodisneyresort.jp/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.tripadvisor.com.au/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.tripadvisor.com.tr/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.navitime.co.jp/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.trainman.in/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.tfl.gov.uk/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.royalcaribbean.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.goindigo.in/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.wizzair.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.hilton.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.hyatt.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.renfe.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.timeout.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.flypgs.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.ukrainealarm.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.etstur.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.anwb.nl/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.airbnb.fr/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.mi-journey.jp/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.aranzulla.it/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.accor.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.ihg.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.volaris.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.emirates.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.jreast.co.jp/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.aircanada.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.maps.google.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.jorudan.co.jp/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.panvel.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.qantas.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.jal.co.jp/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.holidaycheck.de/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.skyscanner.co.in/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.mytour.vn/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.skyscanner.it/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.tripadvisor.co.id/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.britishairways.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.qatarairways.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.lufthansa.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.berlin.de/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.tiket.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.skyscanner.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.nationalrail.co.uk/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.sg.fr/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.ana.co.jp/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.jet2holidays.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.etrain.info/* | Host | | Host permission — access limited to this URL pattern. |
| Access to Sensitive Domains | Risk Factor | | This extension requests access to sensitive domains: https://www.booking.com/*, https://www.aranzulla.it/*, https://www.maps.google.com/*, https://www.britishairways.com/* |
| alarms | Permission | | This permission schedules periodic tasks. Rated Low because it can only trigger events at specified times without access to sensitive data. |