Is EPUBReader safe?

Question

Is EPUBReader safe?

Accepted Answer

EPUBReader is medium risk. Dynamic analysis confirmed that any website can trigger EPUBReader to make an HTTP GET request to a URL of the attacker's choosing — including addresses on private networks (192.168.x.x, 10.x.x.x, 127.0.0.1) that browsers normally cannot reach. The extension's reader page is declared as a web-accessible resource reachable from any web origin, and it reads the filename= URL parameter without validation, forwarding it directly to a network fetch that uses the extension's host_permissions to bypass the browser's same-origin policy. The response body is not accessible to the attacking page, making this a blind server-side request forgery (SSRF) primitive.

Is EPUBReader safe?

Findings