Is Enable Copy Everywhere safe?

Question

Accepted Answer

Enable Copy Everywhere is high risk. Each time you load a page whose domain is on a server-controlled list, Enable Copy Everywhere transmits the full URL (origin and path) of that page to enablecopy.fontguesser.com. Our dynamic analysis captured four POST requests confirming this: navigating to en.wikipedia.org/wiki/Main_Page and /wiki/Internet produced requests with body {"uri":"https://en.wikipedia.org/wiki/Main_Page"} and {"uri":"https://en.wikipedia.org/wiki/Internet"}. The list of trigger domains is fetched from the same server at startup and updated in chrome.storage.local — meaning the operator can add domains without an extension update, and all 70,000 users' navigations on those domains are forwarded without any in-extension notice.

Is Enable Copy Everywhere safe?

Findings