Web Editor

Web Editor

ID: pdmlhckofhkhebmcplblcijijgjiakcm

Supported Languages

🇺🇸English

Extension Info & Metadata

Status
Active
Version
1.0.9
Size
0.07 MB
Rating
4.2/5
Reviews
34
Users
10,000
Type
Extension
Updated
Sep 17, 2023
Category
Developer tools
Price
Free
Featured
Yes
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes

Publisher Contextual Analysis

Trusted
Author
Vineeth TRView Profile
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Total Extensions
5
Active
5
Obsolete
0
Listed
4
Unlisted
1
Total Users
11,105
Screenshot 1
Screenshot 2
Screenshot 3
Screenshot 4
Screenshot 5
Screenshot 6

Forget about all the Code chaos and Customize your website in a handy way

Customize your website, Create your designs. Forget about all the chaos and design your website with your imaginations, in a handy way. The web editor is the tool that provides you with an enhanced way to inspect any website elements, alter their properties, insert contents, design, and visualize the way you want to see them. You don’t need to hold a bunch of technical knowledge. Instead, this tool will do the job for you..

Item
Type
Severity
Description
activeTab
Permission
Medium
This permission grants temporary access to the current tab. Rated Medium because it can access current page content when invoked, though limited to user-initiated actions.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
contextMenus
Permission
Low
This permission adds items to browser context menus. Rated Medium because it only modifies right-click menus without access to page content.

By severity

Critical0
High2
Medium1
Low1

Versions scanned

Showing 1 of 10 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension VersionCode Review Findings
1.0.84

Files with findings

4 distinct paths — top paths by unique finding count:

  • content.js1
  • js/data_bind.js1
  • js/temaplate.js1
  • manifest.json1
S.No.
Category
Severity
File
Summary
Found in Version
1Code Injection
high
js/data_bind.js (line 386)User-supplied CSS text (typed into a contenteditable `<ul>`) is taken as raw `innerText` and written directly to a `<style>` element via `innerHTML` without sanitization. A crafted payload such as `</style><img src=x …
2Unauthorized Data Collection
high
manifest.json (line 8)Seven JavaScript files are injected as content scripts into every URL the user visits (`<all_urls>`), running automatically without any user interaction. Despite the manifest listing `activeTab` in permissions (which …
3Code Injection
medium
content.js (line 78)When the editor is activated, `contentEditable = true` is set on every element in the page's DOM (with only narrow exclusions). This makes the entire page — including form labels, security indicators, button text, and…
4Tracking
low
js/temaplate.js (line 534)Each time the editor overlay is first created, the extension fetches a web font from `fonts.gstatic.com`. This network request leaks the user's IP address, browser fingerprint, and the full URL of the page where the e…
URLs
5
IPv4
0
IPv6
0

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

Gain full insight into all external connections.

Upgrade for full visibility.

clients2.google.com/service/update2/crxhttps://clients2.google.com/service/update2/crx
github.com/R-TEK/colr_pickrhttps://github.com/R-TEK/colr_pickr
www.w3.org/2000/svghttp://www.w3.org/2000/svg
www.w3.org/1999/xlinkhttp://www.w3.org/1999/xlink
fonts.gstatic.com/s/dmsans/v6/rP2Hp2ywxg089UriCZ2IHSeH.woff2https://fonts.gstatic.com/s/dmsans/v6/rP2Hp2ywxg089UriCZ2IHSeH.woff2

Gain full insight into all external connections.

Upgrade for full visibility.

No IP addresses found
Showing 1 to 10 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files (scanned top 25 shared text files)

No comparable text files found between these versions.

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.