Is %D1%84%D1%80%D0%B0%D0%BD%D1%86%D1%83%D0%B7%D1%81%D0%BA%D0%B8%D0%B9-%D1%8D%D0%BA%D1%81%D0%BF%D1%80%D0%B5%D1%81%D1%81 safe?

Question

Accepted Answer

%D1%84%D1%80%D0%B0%D0%BD%D1%86%D1%83%D0%B7%D1%81%D0%BA%D0%B8%D0%B9-%D1%8D%D0%BA%D1%81%D0%BF%D1%80%D0%B5%D1%81%D1%81 is high risk. When you use Французский экспресс with the VFS Global site, the extension saves login credentials, applicant form data, and success or payment records under FRANCE_EXPRESS_* keys in the page's localStorage. Because that storage belongs to visa.vfsglobal.com rather than private extension storage, those records can be read by scripts with access to that page origin's localStorage.

Is Французский экспресс safe?

Findings