Is Easy Video Finder safe?

Medium risk

Easy Video Finder is medium risk. Easy Video Finder makes SafelySearch the default search provider at install. Address-bar searches carry the search text, extension version, vertical, and a fixed affiliate tag; the dashboard search button hits the same endpoint.…

Easy Video Finderv3.0.2Chrome Web Store

45Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

SeverityMEDIUM

ClassUNWANTED

TypeUnexpected

CWECWE-359

SourceAI SANDBOX

Address-Bar Searches Routed Through SafelySearch

Easy Video Finder makes SafelySearch the default search provider at install.

Address-bar searches carry the search text, extension version, vertical, and a fixed affiliate tag; the dashboard search button hits the same endpoint.

01EvidenceCAUSE EFFECT

What actually happens

You did this

You install Easy Video Finder or use its dashboard search box.

The extension's manifest and dashboard script both point searches at SafelySearch.

The extension did this

The extension routes the search text to search.safelysearch.net with a fixed affiliate tag.

The address-bar template contains s=c4pr, and the dashboard appends action=evf, the selected engine, and the encoded query.

02EvidenceFIELD TABLE

Fields sent by the search request

Field	Value	Why it matters
Search text	weather tomorrow	Contains the words you type into the address bar or the extension's dashboard search box.
Affiliate tag	s=c4pr	Lets the destination associate the search with this extension's traffic source.
Extension version	extversion=3.0.2	Adds the installed extension version to the address-bar search URL.
Search category	category=web	Tells the destination that the browser is requesting a web-search result page.
Vertical	vert=private	Adds another routing label to the search request.

03EvidenceNETWORK CAPTURE

Captured request

GEThttps://search.safelysearch.net/search/?category=web&extversion=3.0.2&s=c4pr&vert=private&q={searchTerms}

The verification evidence recorded the manifest-defined GET URL template; no request body was recorded.

04EvidenceCODE COMPARE

The code that does this

Manifest search override and dashboard redirect

What it actually does

Show shipped source

Readable reconstruction of the manifest effectmanifest.json

const searchProvider = {
  name: 'Easy Video Finder',
  isDefault: true,
  addressBarSearchUrl: 'https://search.safelysearch.net/search/?category=web&extversion=3.0.2&s=c4pr&vert=private&q={searchTerms}',
  imageSearchUrl: 'https://search.safelysearch.net/search/?category=images&s=c4pr&q={searchTerms}',
  suggestionUrl: 'https://sug.safelysearch.net/v1/sug/?s=c4pr&vert=videoSearch&q={searchTerms}'
};

Readable reconstruction of the dashboard redirectsettings/script.js

function onDashboardSearchClick(event) {
  event.preventDefault();

  const rawInput = $('.user-input').val();
  if (!rawInput) {
    return;
  }

  const userInput = encodeURIComponent(rawInput);
  const options = encodeURIComponent(JSON.stringify(filters));
  const redirectUrl = `${config.search}&options=${options}&action=evf&se=${temporarySearchEngine}&q=${userInput}`;
  chrome.tabs.update({ url: redirectUrl });
}

Readable reconstruction of the search base URLconfig.js

const manifestSearchUrl = chrome.runtime.getManifest().chrome_settings_overrides.search_provider.search_url;
const parsedSearchUrl = getLocation(manifestSearchUrl);
const queryParams = getParams(parsedSearchUrl.search);

export const config = {
  domain: parsedSearchUrl.origin,
  hostName: 'safelysearch.net',
  search: `${parsedSearchUrl.origin}${parsedSearchUrl.pathname}?category=web&s=${queryParams.s}&vert=${queryParams.vert}`,
  hubURL: chrome.runtime.getManifest().homepage_url,
  uninstall: `${parsedSearchUrl.origin}/wim/uninstall?s=${queryParams.s}&vert=${queryParams.vert}`
};

05EvidenceTHIRD PARTY LIST

Search destination

search.safelysearch.net
Receives address-bar and dashboard search requests, including q={searchTerms}, s=c4pr, and vert=private.

SeverityMEDIUM

ClassUNWANTED

TypeUnexpected

CWECWE-359

SourceAI SANDBOX

Address-Bar Typing Sent to SafelySearch Suggestions

Easy Video Finder sets a SafelySearch suggestion endpoint as the default search provider.

Address-bar suggestion requests send the typed text to sug.safelysearch.net with the fixed s=c4pr affiliate tag and vert=videoSearch label.

01EvidenceCAUSE EFFECT

What actually happens

You did this

You type a search in the Chrome address bar after installing Easy Video Finder.

The configured default search provider includes a SafelySearch autocomplete URL.

The extension did this

Chrome uses the extension-configured suggestion URL and sends the typed text to sug.safelysearch.net.

The request URL contains q={searchTerms}, s=c4pr, and vert=videoSearch.

02EvidenceFIELD TABLE

Fields sent by the suggestion request

Field	Value	Why it matters
Typed address-bar text	weath	Contains the search text being entered before you submit the search.
Affiliate tag	s=c4pr	Lets the destination associate the suggestion traffic with this extension's source tag.
Suggestion vertical	vert=videoSearch	Adds a routing label for video-search autocomplete traffic.
Suggestion host	sug.safelysearch.net	Shows which remote host receives the address-bar suggestion request.

03EvidenceNETWORK CAPTURE

Captured request

GEThttps://sug.safelysearch.net/v1/sug/?s=c4pr&vert=videoSearch&q={searchTerms}