Is Email Tracker safe?

Question

Accepted Answer

Email Tracker is high risk. The extension's source code contains four declarativeNetRequest rules (IDs 5002–5005) that remove the Content-Security-Policy and Content-Security-Policy-Report-Only response headers from every page you load on outlook.live.com, outlook.office.com, mail.live.com, and outlook.office365.com. Our dynamic analysis session confirmed the extension was active and these rules were in force. Content-Security-Policy is a browser security mechanism that tells your browser which external scripts and images are allowed to load on a page. Removing it means that any third-party content injected into those pages — including the extension's own tracking pixels — is no longer blocked by Outlook's security policy. This behavior is not disclosed in the extension's Chrome Web Store listing.

Is Email Tracker + Pixelblock Detector & Blocker safe?

Findings