Is Document Editor safe?

Question

Accepted Answer

Document Editor is critical risk. Each time you navigate to a new page or switch tabs, the extension's background script captures the full URL and transmits it — hex-encoded — to offidocs.com. The request fires automatically with no user interaction and includes a persistent identifier that links all your visits together across sessions. Dynamic analysis confirmed the exfiltration: a URL visited once appeared in outbound traffic to offidocs.com within seconds. On first run, the extension generates a random 10-character identifier and stores it permanently in browser storage. This ID is attached to every URL exfiltration request sent to offidocs.com, creating a durable cross-session profile of every page you visit. Dynamic analysis confirmed the same identifier appeared unchanged across all 7 captured requests covering 5 different websites over multiple browser sessions.

Is Document Editor for doc & docx safe?

Findings