Is CoPilot EveryWhere safe?
CoPilot EveryWhere removes Copilot security headers so its pages can be embedded by the extension.
The extension uses Chrome declarativeNetRequest rules on copilot.microsoft.com to remove X-Frame-Options and clear Content-Security-Policy for Copilot requests. This changes browser protections for Copilot pages and related resources, allowing those pages to be framed or loaded in contexts Microsoft normally restricts.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 0.0.5. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on copilot.microsoft.com
https://copilot.microsoft.com/* and 1 more
Store data in your browser
storage
Block and redirect the requests your browser makes
declarativeNetRequest
See which of your requests its blocking rules matched
declarativeNetRequestFeedback
Show a panel beside the page
sidePanel