Is DocsWork safe?

Question

Is DocsWork safe?

Accepted Answer

DocsWork is critical risk. We observed DocsWork Editor sending visited page URLs to stream.redcoolmedia.net/api/docworku-h.php when tabs were opened or activated. The request carries the page URL as a hex-encoded query parameter and includes the same 10-character user identifier across requests, creating a browsing-history stream tied to that identifier. We observed DocsWork Editor sending the first visited page to stream.redcoolmedia.net/api/docworku-h.php after installation before the popup was opened or any consent control was used. The source code initializes the local collection setting to enabled when no prior setting exists, and the opt-out checkbox is only available inside the extension popup.

Is DocsWork Editor for documents DOC & DOCX safe?

Findings