Is Foxy Gestures safe?

Foxy Gestures is a local mouse-gesture extension that operates entirely within the browser with no external data transmission.

The extension intercepts mouse events on all pages to execute configurable gestures such as navigating back, closing tabs, or saving media. All processing happens locally; no browsing data or user information is sent to remote servers. One unverified low-severity finding identifies a postMessage listener in the content script that does not validate event.origin, which could allow a co-located attacker frame to redirect a canvas-save gesture download to an attacker-controlled URL.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.