Who makes Allow CSP: Content-Security-Policy?

Allow CSP: Content-Security-Policy is published by Muyor. The same operator publishes 9 other store listings, none of which carry a security finding.

Is Allow CSP: Content-Security-Policy safe?

Q: Is Allow CSP: Content-Security-Policy safe?

Allow CSP: Content-Security-Policy is rated clean - our review surfaced no unexpected behaviour.

Clean risk

Allow CSP: Content-Security-Policy removes Content-Security-Policy headers from pages and frames when enabled.

When turned on, the extension uses Chrome's declarativeNetRequest API across all URLs to remove Content-Security-Policy headers from main pages and embedded frames. It can also remove Content-Security-Policy-Report-Only headers when that option is enabled, changing browser-enforced page security rules rather than sending the headers to another party.

Muyorv0.1.3Chrome Web Store

1Risk

Who publishes it

Muyor - 9 other listings from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher

Muyor

Website

mybrowseraddon.com/content-security-policy.html

Same store account

9 other listings published from this account, 1.1M+ users between them, none of them carrying a finding.

Allow CORS: Access-Control-Allow-Origin800k+Clean Open With Download Manager90k+High Image Downloader for IW80k+Clean Equalizer for YouTube™70k+Clean Audio Equalizer50k+Clean Docs Viewer10k+Clean 3 more listings in the relationship graph, on paid plans →

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 0.1.3. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

Read and change your data on every site you visit
<all_urls>
Store data in your browser
storage
Block and redirect the requests your browser makes
declarativeNetRequest