Is 7tv safe?

Question

Is 7tv safe?

Accepted Answer

7tv is medium risk. When you open the 7TV extension settings and navigate to the Compatibility tab, the extension automatically sends a GET request to 7tv.io/v3/config/extension — before any interaction within the tab. Our dynamic analysis captured this request firing when the /compat route loaded in the 7TV options page. The server's JSON response is the sole input that determines which of your installed extensions receive a DISABLE button in the compatibility panel: any extension whose ID appears in the remote compatibility list gets a one-click DISABLE control rendered next to its name. After you grant the optional Management permission — requested when you click 'Check Compatibility' — clicking DISABLE calls chrome.management.setEnabled to turn off the flagged extension immediately. Because the list is fetched live on every tab visit, the operator can update which extensions are targeted at any time without shipping a Chrome Web Store update.

Is 7TV safe?

Findings