Is 4saved safe?

Question

Is 4saved safe?

Accepted Answer

4saved is high risk. Our dynamic analysis captured a GET request to https://4saved.com/domains.json?v=1 at session startup. The response — an array of declarativeNetRequest rule objects — was applied immediately via chrome.declarativeNetRequest.updateDynamicRules. The captured rules include stripping Content-Security-Policy and X-Frame-Options response headers, setting Access-Control-Allow-Origin to *, and spoofing Referer and Origin headers for multiple CDNs. These rules affect every website you visit. Because the rules are fetched from an external server at runtime, the set of rules can be changed at any time without a Chrome Web Store update. Our dynamic analysis captured a GET request to https://4saved.com/master.json at session startup. The response contains a 'master-m3u8-domains' array, which was stored in the extension's local state as remoteConfig.rawMasterDomains. The webRequest.onHeadersReceived listener uses this array to decide which network responses to inspect and fetch for m3u8 playlist content. Because the array is fetched from an operator-controlled server, the domains subject to active response inspection can be changed at any time without a Chrome Web Store update. Our test session observed the array ['twimg.com', 'hls.ted.com'] returned from the server.

Is Video Downloader for Chrome - M3U8 Video Downloader | 4saved safe?

Findings