Is DragIt! safe?
DragIt! lets page scripts trigger its drag-and-drop handler to open an attacker-chosen URL in a new tab.
DragIt! injects a content script on HTTP, HTTPS, and FTP pages and listens for document-level drag-and-drop events. Its drop handler accepts URL or text values from the page event without checking for a trusted user gesture, then asks the service worker to open that URL in a new tab.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 1.7.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
See the address and title of every tab you have open
tabs
Store data in your browser
storage