Is fluany safe?

Question

Is fluany safe?

Accepted Answer

fluany is high risk. When you use fluany's flashcard feature, the extension fetches term and definition content from its Supabase API and renders that content inside the current page. The claim is confirmed: flashcard DOM content from dykagtuaezkefvvmskzb.supabase.co can be treated as page HTML through dangerouslySetInnerHTML when the card is shown. When a flashcard is shown, fluany renders the deck name, term, and definition into the current web page's DOM. Because the content script runs on all sites, scripts from the page you are viewing can read the visible card text from the .flu-card element, exposing your flashcard content as DOM content.

Is fluany safe?

Findings