Is Canvas files Downloader safe?
Canvas files Downloader lets any course-shaped page trigger extension-privileged file downloads.
The extension runs its content script on any site with a /courses/ path, not just Canvas or Instructure pages. On those pages, matching links can be collected from the DOM and sent to the background script, which starts downloads without checking that the sender is a trusted Canvas host.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 1.3.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on instructure.com
*://*.instructure.com/courses/*
Read and change your data on every site you visit
*://*/courses/*
Start, monitor and manage your downloads
downloads