Is ChatGPT Side Panel safe?

Clean risk

ChatGPT Side Panel removes frame-protection headers so ChatGPT and OpenAI pages can load inside its side panel.

The extension installs a declarativeNetRequest rule that removes Content-Security-Policy and X-Frame-Options response headers for main-frame and sub-frame requests covered by its OpenAI and ChatGPT host permissions. This lets the side panel embed chatgpt.com in an iframe; the stored claim identifies affected data as URLs and headers, with no external recipient endpoint.

wong2v1.1.0Chrome Web Store
0Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 1.1.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on openai.com

    https://*.openai.com/

  • Read and change your data on chatgpt.com

    https://*.chatgpt.com/

  • Show a panel beside the page

    sidePanel

  • Block and redirect the requests your browser makes

    declarativeNetRequest

  • Show you desktop notifications

    notifications

Updated 21 September 2026aacfibelemnkkbkelbhdbfhokeemfaho