Is Easy Cookie Editor safe?

Findings

Deprecated Marketplace Item

Flags items that have been deprecated by the marketplace or their publisher, indicating they are no longer maintained or supported.

medium

Broad Host Permissions

Flags items that declare overly broad host access patterns, enabling interaction with all websites. This level of access can be exploited to inject scripts into trusted sites and increases the risk of sensitive data exposure, cross-site surveillance, and credential harvesting.

medium

Identity & Authentication Permissions

Flags items that request access to user identity or authentication flows. These capabilities may expose session credentials or login behavior, increasing the risk of impersonation, session hijacking, or unauthorized account access.

medium

All findings are available for Enterprise users

Code analysis

AI-powered analysis of the extension's source code for security insights and risk assessment.

high

Enterprise Only

medium

Enterprise Only

low

Enterprise Only

CODE INSIGHTS ARE AVAILABLE FOR ENTERPRISE USERS

Permissions

high

api

Permits reading and modifying browser cookies, which can contain sensitive information including login session data and site preferences.

high

tabs

api

Provides access to privileged information about open tabs including URLs, titles, and loading status, beyond basic tab management.

low

activeTab

api

Grants temporary access to the current tab's data when triggered by user interaction, limiting scope compared to permanent permissions.

API Calls

API calls detected through static analysis of the source code. For more accurate insights, explore our sandbox dynamic analysis.

medium

chrome.runtime.id

chrome

/background.js

All API calls are available for Enterprise users

Secrets

Any encoded/decoded secrets we managed to find in the source code, git repository, or related files

high

Enterprise Only

medium

Enterprise Only

low

Enterprise Only

SECRETS ARE AVAILABLE FOR ENTERPRISE USERS

Vulnerabilities

Known vulnerabilities and security issues detected in the extension's dependencies and code.

high

Enterprise Only

medium

Enterprise Only

low

Enterprise Only

VULNERABILITIES ARE AVAILABLE FOR ENTERPRISE USERS

External communication

Any identifiers we detected that may indicate external communication from the item's code

https://storage.googleapis.com/workbox-cdn/releases/4.3.1/workbox-sw.js

popup/service-worker.js

All external communications are available for Enterprise users

Dependencies

Dependencies and third-party libraries used by the extension, including version information and license details.

react-dom

Version:

16.13.0

All dependencies are available for Enterprise users

Licenses & Compliance

Compliance

Compliance status and certifications for the extension and its publisher

Gmail

Gmail is compliant with GDPR, as indicated by its commitment in contracts regarding the processing of customer personal data in accordance with GDPR regulations. Additionally, Google's status as a parent company supports this compliance, confirmed by certifications such as ISO 27017 for Google Cloud and workplace services.

Compliant

Google LLC

Gmail, which is part of Google LLC, is stated to be ISO/IEC 27001:2022 certified along with its services such as Google Cloud Platform and Google Workspace. The parent company, Alphabet Inc., also benefits from this compliance as it oversees Google LLC.

Compliant

Gmail

Gmail, as a service of Google, is PCI DSS compliant. Google's PCI DSS certification meets the PCI DSS 4.0 compliance standard, assuring that they provide secure handling of cardholder information.

Compliant

Licenses

No license text available...