| Contextual Risk Factors | Risk Factor | | The following context increases the overall risk:• 20% increase: Access to sensitive domains increases potential impact |
| storage | Permission | | This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads. |
| *://*.airbnb.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.airbnb.ca/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.airbnb.co.uk/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.airbnb.de/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.airbnb.fr/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.airbnb.es/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.airbnb.it/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.airbnb.nl/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.airbnb.com.au/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.airbnb.co.nz/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.airbnb.jp/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.airbnb.in/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.airbnb.sg/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.booking.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.booking.ca/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.booking.co.uk/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.booking.de/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.booking.fr/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.booking.es/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.booking.it/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.booking.nl/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.booking.com.au/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.booking.co.nz/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.booking.jp/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.booking.in/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.booking.sg/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.vrbo.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.vrbo.ca/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.vrbo.co.uk/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.vrbo.de/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.vrbo.fr/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.vrbo.es/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.vrbo.it/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.vrbo.com.au/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.expedia.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.expedia.ca/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.expedia.co.uk/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.expedia.de/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.expedia.fr/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.expedia.es/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.expedia.it/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.expedia.nl/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.expedia.com.au/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.expedia.co.nz/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.expedia.jp/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.expedia.in/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.expedia.sg/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.hotels.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.travelocity.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.travelocity.ca/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.travelocity.co.uk/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.kayak.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.kayak.ca/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.kayak.co.uk/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.kayak.de/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.kayak.fr/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.kayak.es/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.kayak.it/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.kayak.nl/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.kayak.com.au/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.kayak.co.nz/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.kayak.jp/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.kayak.in/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.kayak.sg/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.skyscanner.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.skyscanner.net/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.skyscanner.ca/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.skyscanner.co.uk/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.skyscanner.de/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.skyscanner.fr/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.skyscanner.es/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.skyscanner.it/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.skyscanner.nl/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.skyscanner.com.au/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.skyscanner.co.nz/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.skyscanner.jp/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.agoda.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.agoda.net/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.agoda.ca/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.agoda.co.uk/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.agoda.de/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.agoda.fr/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.agoda.es/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.agoda.it/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.agoda.nl/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.agoda.com.au/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.agoda.sg/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.agoda.jp/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.agoda.in/* | Host | | Host permission — access limited to this URL pattern. |
| Access to Sensitive Domains | Risk Factor | | This extension requests access to sensitive domains: *://*.booking.com/*, *://*.booking.ca/*, *://*.booking.co.uk/*, *://*.booking.de/*, *://*.booking.fr/*, *://*.booking.es/*, *://*.booking.it/*, *://*.booking.nl/*, *://*.booking.com.au/*, *://*.booking.co.nz/*, *://*.booking.jp/*, *://*.booking.in/*, *://*.booking.sg/* |