Is Currency Helper safe?
Currency Helper sends searches from its new-tab page to goog.currencyhelperext.com.
Currency Helper replaces the browser's new-tab page with its own search page. When you enter a search term there and press Search, the extension redirects the page to goog.currencyhelperext.com with the search text in the URL query parameter.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Findings
New-tab searches are sent to Currency Helper's search endpoint
When you search from Currency Helper's new-tab search box, the extension redirects the page to goog.currencyhelperext.com with your search terms in the URL.
This sends your form input and URL data and requires you to act first.
- Severity
- Medium unwanted
- Type
- Unexpected
- CWE
- CWE-359
- Source
- Dynamic sandbox
The user enters a query in the new-tab search box and uses the search button.
The extension redirects the page to goog.currencyhelperext.com with the entered query in the q URL parameter.
- Search termscurrency exchange rates (illustrative)
The text you typed into the new-tab search box is included in the request URL.
- Destination URLhttps://goog.currencyhelperext.com/?sprv=1&q=currency%20exchange%20rates (illustrative)
The request URL carries the search terms in the q parameter.
What it can do
Permissions this extension asks for, as declared in version 1.0.3. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on currencyhelperext.com
*://*.currencyhelperext.com/*
Where it sends data
Destinations our analysis observed Currency Helper contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- goog.currencyhelperext.com
Currency Helper sends data to goog.currencyhelperext.com. No other extension we have analysed sends data here.