Is Arc Peek: Link preview safe?
Arc Peek: Link preview removes CSP and X-Frame-Options headers so linked pages can load inside its preview iframe.
It runs on all sites and, when you drag or shift-click a link, injects an iframe preview for that target URL. To make pages frameable, it removes Content-Security-Policy and X-Frame-Options headers globally for top-level pages and adds preview-specific header-removal rules for the clicked URL. The claim identifies affected data as URLs and response headers, with no external data recipient endpoint.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 1.3.2. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Store data in your browser
storage
Block and redirect the requests your browser makes
declarativeNetRequest