Is Anime4K WebExtension safe?

Medium risk

Anime4K WebExtension can add permissive CORS headers to all media responses when its cross-origin fix is enabled.

Its optional cross-origin compatibility setting enables a browser rule that sets Access-Control-Allow-Origin: * and allows GET, HEAD, and OPTIONS on media responses. The rule is not limited to the extension's own video processing, so once enabled it applies browser-wide to matching media requests from any site.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

沉默の金v0.5.0Chrome Web Store
43Risk
Who publishes it

沉默の金 - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
沉默の金

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 0.4.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to. The current listed version is 0.5.0, which we have not unpacked yet.

  • Read and change your data on every site you visit

    <all_urls>

  • Store data in your browser

    storage

  • See the address and title of every tab you have open

    tabs

  • Run its own code inside the pages you visit

    scripting

  • Block and redirect the requests your browser makes

    declarativeNetRequest

declarativeNetRequestWithHostAccess
Updated 30 September 2026hpmbccepehpoanjpjkamfdpdkbmfmhek