Is CovidDash at Johns Hopkins University safe?
CovidDash at Johns Hopkins University replaces browser search, homepage, and startup settings with coviddashboard.extjourney.com.
The extension sets the browser homepage, startup page, and default search provider to coviddashboard.extjourney.com. Searches entered through the browser search provider or the extension's new-tab page are sent to that site as query text in the URL.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Findings
Search and homepage traffic route to coviddashboard.extjourney.com
The extension sets your browser homepage, startup page, and default search provider to coviddashboard.extjourney.com.
Search terms from browser search settings or the extension's new-tab search box are routed to that same site.
- Severity
- Medium unwanted
- Type
- Unexpected
- CWE
- CWE-359
- Source
- Dynamic sandbox
The user performs a search or interacts with the extension's search page.
The extension routes the query through coviddashboard.extjourney.com using its search and homepage settings.
- Destination URLhttps://coviddashboard.extjourney.com/?q=weather (illustrative)
Shows the remote page that receives the query and provides browsing context.
- Search inputweather near me (illustrative)
Contains the words typed into the browser search flow or extension search box.
What it can do
Permissions this extension asks for, as declared in version 1.0.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Store data in your browser
storage
Where it sends data
Destinations our analysis observed CovidDash at Johns Hopkins University contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- coviddashboard.extjourney.com
CovidDash at Johns Hopkins University sends data to coviddashboard.extjourney.com. No other extension we have analysed sends data here.