Is CFCA CertEnrollment.XIBank Extension safe?

Clean risk

CFCA CertEnrollment.XIBank Extension lets XIB pages choose a native messaging host and forward payloads to it.

Pages on xib.com.cn and test.xib.com.cn can send external messages to this extension. The extension passes a page-supplied host name into Chrome native messaging and forwards the page's funcInfo payloads to the connected local native host, then returns matching native responses to the page.

linxiaoyang1989v3.2.0.5Chrome Web Store
1Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 3.2.0.5. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on xib.com.cn

    https://*.xib.com.cn/* and 1 more

  • Read and change your data on test.xib.com.cn

    https://*.test.xib.com.cn/* and 1 more

  • Talk to a program installed on your computer, outside the browser's sandbox

    nativeMessaging

Updated 30 September 2026afafakmmpidgfciiblocaccjllbchmih