Is Chrome Mask safe?

Chrome Mask fetches a Chrome version number from a third-party server and injects it into request headers on user-whitelisted sites.

The extension spoofs the browser's User-Agent and Client Hints headers to make sites believe the user is running a specific version of Chrome. To keep that version number current, it fetches a plain-text file from chrome-mask-remote-storage.0b101010.services and stores the result locally with no integrity check. The fetched value is then used verbatim when rewriting outgoing headers on any site the user has whitelisted.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.