Is Equicord Web safe?

Medium risk

Equicord Web loads QuickCSS editor code from cdn.jsdelivr.net while removing Discord content-security-policy headers.

When you open the QuickCSS editor, Equicord Web loads Monaco editor components from cdn.jsdelivr.net before editing the stored QuickCSS value. The extension also removes Discord's content-security-policy and report-only headers on Discord frames, broadening the page environment where the mod runs.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

thororenv1.15.6.0Chrome Web Store
40Risk
Who publishes it

thororen - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
thororen

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed Equicord Web contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • cdn.jsdelivr.netwidely used

    Equicord Web sends data to cdn.jsdelivr.net. A widely used service: 32 other extensions we have analysed send data here.

Updated 30 September 2026mcambpfmpjnncfoodejdmehedbkjepmi