Is Filestage – Where the best work gets approved safe?

Low risk

Filestage removes framing protection headers from all subframe responses after detecting its viewer.

When a Filestage page contains its extension detector element, the extension installs a browser session rule that applies to every subframe response. That rule removes X-Frame-Options, Content-Security-Policy, Feature-Policy, and Content-Security-Policy-Report-Only headers, and it is not limited to Filestage domains.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Filestagev2.0.0Chrome Web Store
18Risk
Who publishes it

Filestage GmbH - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Filestage
Declared legal entity
Filestage GmbH
Registered address
Lautenschlagerstraße 16, Stuttgart 70173, DE
Registered contact
Filestage GmbH

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 2.0.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every site you visit

    <all_urls>

  • Act on the current tab, but only after you click the extension

    activeTab

  • Block and redirect the requests your browser makes

    declarativeNetRequest

  • See the address and title of every tab you have open

    tabs

Updated 30 September 2026jpgnokfolagdlepfgoihhdfmbanfecgk