Is Easy Bruinwalk Ratings safe?
Bruinwalk is medium risk. Submitting a professor evaluation sends the full evaluation to echo.pcheng.cc: expected grade, overall rating, written comments, and course/professor details, plus extension storage data used as a persistent token.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Findings
Professor evaluation content is sent to echo.pcheng.cc after submission.
Submitting a professor evaluation sends the full evaluation to echo.pcheng.cc: expected grade, overall rating, written comments, and course/professor details, plus extension storage data used as a persistent token.
- Severity
- Medium unwanted
- Type
- Unexpected
- CWE
- CWE-359
- Source
- Dynamic sandbox
The user submits a professor evaluation.
The extension sends the full evaluation content and a persistent extension token to echo.pcheng.cc.
- Your evaluation form responsesExpected grade A, overall rating 5, comments about the course (illustrative)
The submitted review can include expected grade, overall rating, written comments, course details, and professor details.
- Extension storage tokend7f3a1b2-... (illustrative)
A persistent extension token can link multiple submissions or events from the same browser profile.
- Page titleProfessor Evaluation (illustrative)
The page title provides context about where the evaluation was submitted.
What it can do
Permissions this extension asks for, as declared in version 1.1.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on bruinwalk.com
*://*.bruinwalk.com/*
Read and change your data on echo.pcheng.cc
https://echo.pcheng.cc/*
Store data in your browser
storage
Sign you in with your Google account
identity