Is beautiful roses safe?
Beautiful Roses replaces the New Tab page with a NYTimes Technology RSS feed rendered via unescaped innerHTML.
On every new tab, the extension fetches a fixed NYTimes Technology RSS feed over HTTPS and inserts each item's title, link, and description straight into the page using innerHTML, without escaping or sanitizing the text. The feed URL is hardcoded to rss.nytimes.com and not user- or attacker-controlled, so this only matters if that feed itself were ever compromised or manipulated in transit.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itNo other listings under this identity
No other listings under this identity
What this publisher told the store about itself, and the other listings that told it the same thing.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed beautiful roses contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- rss.nytimes.com
beautiful roses sends data to rss.nytimes.com. No other extension we have analyzed sends data here.