Firefox Add-ons
1Versions
0Code reviewed

Not reviewed

No code review on record

We have not reviewed this extension’s code, so we cannot vouch for it either way. Check the permissions below to decide whether it asks for more than it needs.

Want us to read this extension's code? Ask for a review and we'll queue it.

12 indicators in this extension

12 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

Onion Control (anonymous proxy) is not yet reviewed by Extension Auditor. It comes from a publisher with 56 extensions and was last updated in December 2020.

Onion Control (anonymous proxy)

Onion Control (anonymous proxy) Firefox extension security report

ID: tor-control

Extension Info & Metadata

Status
Active
Version
0.1.5
Size
0.18 MB
Rating
4.0/5
Reviews
42
Users
375
Type
Extension
Updated
Dec 22, 2020
Category
N/A
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
No
This publisherTrack record
56extensions
All still listed

Publisher Contextual Analysis

Author
Andy Portmen
Website
Visit
Extensions
56
Active
28
Obsolete
0
Listed
56
Unlisted
0
Users
215,866

Screenshots & videos

Screenshot 1

Install growth

Item
Type
Severity
Description
proxy
Permission
Critical
This permission allows the extension to control the browser's proxy settings. Rated Critical because it can route all traffic through potentially malicious proxies, enabling man-in-the-middle attacks and traffic monitoring.
privacy
Permission
Critical
This permission allows modification of Chrome's privacy settings. Rated Critical because it can disable security features, modify network configurations, and compromise browser security settings.
nativeMessaging
Permission
High
This permission enables communication with applications installed on your computer. Rated High because it can exchange data with native programs, potentially exposing system-level information and local files.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 15% increase: Older manifest version lacks modern security controls
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
Older Manifest Version
Risk Factor
Medium
This extension uses Manifest Version 2
notifications
Permission
Low
This permission displays system notifications. Rated Low because it can only show user-visible notifications without accessing system data.

12 indicators in this extension

12 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

Brings the anonymity of the Tor network and modifies few settings to protect user privacy

Read the publisher’s full description

This extension starts a Tor executable in the background. When the connection is successfully established, it redirects all your traffic through Tor's anonymous network to increase user privacy. This is done by dynamically changing the proxy configuration of your browser to use a SOCKS5 proxy. When your browser is connected to the Tor network, WebRTC gets disabled to prevent your public IP from revealing your identity (optional feature; enabled by default). Note that for the extension to run the Tor executable, you will need to install a NodeJS native client. This is a bridge connector to allow the extension to execute Tor commands. You will get a notification on the first use to install this native client. It is possible to request a new identity (new IP) right from the extension toolbar popup view. Also, since the extension uses its unique communication port, there will be no conflict with other running instances of Tor (like Tor Browser). Please read FAQ #1 on the homepage of the extension to prepare the extension to use Tor executable. For now, the Tor bundle is prepared for Mac OS and Windows. On Linux, install the tor as usual and set the path on the options page. If you have a suggestion to improve this extension or have found a bug please report on <a href="https://prod.outgoing.prod.webservices.mozgcp.net/v1/e06d60ce7559f574f9741710bfcb6b698b7fe3552205e1fc90b69599edd2f9cc/https%3A//github.com/andy-portmen/tor-bundle/" rel="nofollow">https://github.com/andy-portmen/tor-bundle/</a>

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

URLs
12

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

12 indicators in this extension

12 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
0.1.5
Latest
0.18 MBNot scanned—
d7075b342a5e98748a7dd6c361eca7977853280a19293c1b2209a5ec1f158b0d
Showing 1 to 1 of 10 rows
Rows per page:

Gain full insight into all external connections.

Upgrade for full visibility.