Is Ad Blocker Pro Shield safe?

// background.js:155-194const c = async () => { const { nextUpdate: t } = await chrome.storage.local.get({ nextUpdate: 0 }); if (Date.now() < t) return; let { extensionInstance: e, curNetRulesVersion: s } = await chrome.storage.local.get({ extensionInstance: "default", curNetRulesVersion: 0 }); // Fetch version check from server const n = await r(o.update + "?ukey=" + e + "&version=" + chrome.runtime.getManifest().version); if (n["version"] > s) { // Server-supplied URL is fetched with NO integrity check await l(await r(n.url)) } await chrome.storage.local.set({ curNetRulesVersion: n["version"], nextUpdate: Date["now"]() + 24 * 3600 * 1e3 })};const l = async t => { // Remove ALL existing dynamic rules const e = await chrome.declarativeNetRequest.getDynamicRules(); const s = e.map(t => t.id); const n = o(); await chrome.declarativeNetRequest.updateDynamicRules({ removeRuleIds: s, // clears every rule addRules: n // replaces with whatever the server sent }); await chrome.storage.local.set(t); // stores the entire server JSON function o() { // No validation — maps server-supplied rules directly return t.dynamicRules?.map((t, e) => { t["id"] = e + 1; return t }) }};

// background.js:178-194// Called after every successful update-check if the server reports a newer version.// 't' is the full parsed JSON body from the server-supplied net_data.json URL.const l = async t => {  // 1. Replace dynamic DNR rules (covered by claim 10790)  const e = await chrome.declarativeNetRequest.getDynamicRules();  const s = e.map(t => t.id);  await chrome.declarativeNetRequest.updateDynamicRules({    removeRuleIds: s,    addRules: t.dynamicRules?.map((t, e) => { t["id"] = e + 1; return t })  });  // 2. Write the ENTIRE server JSON object into chrome.storage.local.  //    Any key in the response — including per-domain keys like 'youtube.com',  //    'facebook.com', 'sbs.com.au' — silently overwrites what was loaded  //    from the bundled hosts_*.json files at install time.  await chrome.storage.local.set(t);};

// content-scripts/iworld/protection.js:97-101// processActive() is called with s.active — the 'active' array from the// per-domain chrome.storage.local object. Each entry is {scriptletName: params}.// The scriptlet name becomes the CustomEvent name fired into the MAIN world.processActive(t) {  for (const e of t) {    const s = Object.keys(e)[0]; // e.g. 'blockXhr', 'avoidWebRTC'    invokeScriptlet(s, e[s]);    // dispatches CustomEvent(s, {detail:{params:e[s]}})  }}

// background.js:155-177const c = async () => {  const { nextUpdate: t } = await chrome.storage.local.get({ nextUpdate: 0 });  if (Date.now() < t) return;  let { extensionInstance: e, curNetRulesVersion: s } = await chrome.storage.local.get({    extensionInstance: "default",    curNetRulesVersion: 0  });  const n = await r(o.update + "?ukey=" + e + "&version=" + chrome.runtime.getManifest().version);  if (n["version"] > s) {    await l(await r(n.url))  }  await chrome.storage.local.set({    curNetRulesVersion: n["version"],    nextUpdate: Date.now() + 24 * 3600 * 1e3  })};