Is Cookie Editor and Storage Manager safe?
Cookie Editor and Storage Manager is medium risk. Opening the popup sends the current tab URL to a Google Apps Script telemetry endpoint, with a persistent extension UUID that links popup interactions to the same install over time.
Who publishes itMyFreshTools - 1 other listing from the same operator, none carrying a finding
MyFreshTools - 1 other listing from the same operator, none carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same store account
1 other listing published from this account, 1k+ users between them, none of them carrying a finding.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Findings
Popup actions send the active tab URL to a Google Apps Script endpoint.
Opening the popup sends the current tab URL to a Google Apps Script telemetry endpoint, with a persistent extension UUID that links popup interactions to the same install over time.
- Severity
- Medium unwanted
- Type
- Unexpected
- CWE
- CWE-359
- Source
- Dynamic sandbox
You perform a popup action in the extension.
The extension sends the active tab URL and persistent extension UUID to a Google Apps Script telemetry endpoint.
- Current tab URLhttps://example.com/account (illustrative)
Shows which page was open when the popup action was used.
What it can do
Permissions this extension asks for, as declared in version 7.3. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on every site you visit
<all_urls>
Act on the current tab, but only after you click the extension
activeTab
Read and change cookies, including the ones that keep you signed in
cookies
Store data in your browser
storage
Run its own code inside the pages you visit
scripting