Is Errors.net official extension safe?

Question

Accepted Answer

Errors.net official extension is high risk. Our dynamic analysis observed this extension opening a new browser tab to a URL specified entirely by the errors.net server. The extension sends data about each page you visit to errors.net and then passes the server's response directly to Chrome's tab-creation API with no URL filtering. If the errors.net server returns a tab URL in its response, your browser opens that page without any warning or user action. During our test, the server directed the browser to an errors.net page that included the visited page URL and the persistent user UUID in its query string. Our dynamic analysis captured 18 POST requests from this extension to errors.net during a single browsing session across five or more distinct sites. Each POST included the full URL of the visited page and a persistent identifier tied to your browser installation. Separately, every page that returned a 4xx or 5xx HTTP error also triggered a POST carrying that page's URL. The net result is that errors.net receives a detailed log of where you browse, keyed to a UUID that does not change between sessions.

Is Errors.net official extension safe?

Findings