Is CRM Integrator for Hosted Telephony safe?
CRM Integrator for Hosted Telephony lets webpages trigger calls through the logged-in BroadWorks account.
The extension runs a content script on every webpage and treats clicks on elements with its call-button class as instructions to start a call. Because the click handler does not check whether the event came from a real user action, a webpage can synthesize that click and cause the extension to ask the configured BroadWorks XSI actions server to place a call from the signed-in account.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itMondago Ltd - no other listings under this identity
Mondago Ltd - no other listings under this identity
What this publisher told the store about itself, and the other listings that told it the same thing.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 2.0.0.8375. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
See the address and title of every tab you have open
tabs
Show you desktop notifications
notifications
Keep running in the background while your browser is open
background
Detect when you step away from your computer
idle
Store data in your browser
storage
Add items to the right-click menu
contextMenus
Sign you in with your Google account
identity
Where it sends data
Destinations our analysis observed CRM Integrator for Hosted Telephony contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- configured BroadWorks XSI actions server
CRM Integrator for Hosted Telephony sends data to configured BroadWorks XSI actions server. Named as a recipient in this extension's own analysis.