Is D.Bridge 2 safe?

Question

Is D.Bridge 2 safe?

Accepted Answer

D.Bridge 2 is medium risk. Dynamic analysis confirmed that D.Bridge 2 relays postMessage calls from any webpage you visit directly to the sk.ditec.dbridge2.nm native application (D.Launcher 2), which performs qualified electronic signature operations on your computer, without checking which website is sending the message. A test page at example.com sent an initReq postMessage and the extension responded with an initResp containing the extension version and ID, confirming the relay opened from an unrelated site. The content script injected on every webpage verifies only that the message originates from the same browser frame, not from a cross-origin iframe — it does not check event.origin or restrict which domains may invoke the native signing host.

Is D.Bridge 2 safe?

Findings