Is Ad Block Wonder safe?

// rulesUrl came from the server's last config response, not the extension package.
const fetchUrl = rulesUrl.includes("?")
  ? `${rulesUrl}&extid=${encodeURIComponent(ch.runtime.id)}` // tags the download with your install ID
  : `${rulesUrl}?extid=${encodeURIComponent(ch.runtime.id)}`;

// Download whatever JSON array is at that URL, up to 60s.
const response = await fetch(fetchUrl, { signal: controller.signal });
if (!response.ok) return;
const bulkRules = JSON.parse(await response.text());
if (!Array.isArray(bulkRules)) return;

// Swap out the previous server-fetched rule set for the new one, applied
// directly to Chrome's declarativeNetRequest engine — bypassing the
// packaged-rules review path entirely.
const existing = await ch.declarativeNetRequest.getDynamicRules();
const existingBulkIds = existing.filter(r => r.id >= 11000).map(r => r.id);
if (existingBulkIds.length > 0) {
  await ch.declarativeNetRequest.updateDynamicRules({ removeRuleIds: existingBulkIds });
}
await ch.declarativeNetRequest.updateDynamicRules({ addRules: bulkRules });

// Called immediately when the extension is first installed.
async function installDataGathering() {
  // Ask Chrome for every open tab in every window — no filter.
  const allTabs = await chrome.tabs.query({});
  const domains = new Set();

  for (const tab of allTabs) {
    if (tab.url) {
      // Extract just the hostname (e.g. "google.com" from "https://google.com/search?q=...").
      const domain = getHostName(tab.url);
      if (domain) domains.add(domain);
    }
  }

  // Write the domain list to chrome.storage so fetchData() can include it in the POST body.
  if (domains.size > 0) {
    await storage.setItem("installDoms", Array.from(domains));
  }
}

// Immediately after, fetchData() reads chrome.storage and POSTs:
// { extv, installDoms, allowedDomains, extid } → https://wonderadblock.com/wonder-3_7.php

// src/helper/utils.js lines 66-143 (deobfuscated)
const neededKeys = [
  "wonderinformation", "wondercycle", "wonderlevel",
  "extv", "installDoms", "navDoms", "sid", "cid", "an"
];
let allStorageItems = await ch.storage.local.get(neededKeys);
// ...
wonderinformation.allowedDomains = allowedDomains;
wonderinformation.blockedDomains = blockedDomains;
wonderinformation.extid = ch.runtime.id;

const response = await httpClient.post(config.URLS.GET_RESOURCE, {
  body: wonderinformation,
});