Is Dark Theme - Custom New Tab safe?

Medium risk

Dark Theme - Custom New Tab sends new-tab search terms to find.wsrcnav.com with fixed tracking parameters.

The extension replaces Chrome's new tab page with its own search form. When a user searches from that page, the query is submitted by GET to find.wsrcnav.com/results.aspx along with gd, n, and searchsource tracking parameters, placing the search terms and identifiers in the URL.

arkdvorcovichv4.3.8Chrome Web Store
45Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

New-tab search sends queries to find.wsrcnav.com

When you search from the extension's custom new-tab page, the form navigates to find.wsrcnav.com.

The request includes your search terms in the q parameter and fixed gd, n, and searchsource parameters from the shipped page code.

Severity
Medium unwanted
Type
Unexpected
CWE
CWE-359
Source
Dynamic sandbox
What actually happens
You did this

You submit a search from the extension's new-tab page.

This is the visible Search box rendered by the extension-controlled page.

The extension did this

The page sends that query to find.wsrcnav.com with fixed tracking parameters.

The shipped form uses a GET request, so the query and fixed values appear in the destination URL.

Fields submitted by the new-tab search form
  • Your search terms
    coffee shops near me

    The words you type into the new-tab search box are sent to the results host.

  • Campaign code
    RD1003138

    A fixed code is added to every submitted search from this extension page.

  • Partner number
    7771

    A fixed number travels with the search request and can group traffic from this page.

  • Search source
    69

    A fixed source value is attached to the search request along with your query.

Captured request
GEThttps://find.wsrcnav.com/results.aspx

Top-level navigation to the search-results endpoint; verification evidence records q, gd, n, and searchsource in the URL.

The code that does this

The shipped new-tab page wires searches to find.wsrcnav.com

Readable version

Readable manifest behavior

manifest.json
{  "manifest_version": 3,  "version": "4.3.8",  "background": {    "service_worker": "background.bundle.js"  },  "chrome_url_overrides": {    "newtab": "newtab.html"  },  "permissions": []}

Readable new-tab loader

newtab.html
<!doctype html><html lang="en">  <head>    <meta charset="UTF-8" />    <title>Dark Theme - Custom New Tab</title>    <script defer="defer" src="/newtab.bundle.js"></script>  </head>  <body style="background-color:#000">    <div id="app-container"></div>  </body></html>

Readable search form

newtab.bundle.js
const SearchForm = () => (  <form    action="https://find.wsrcnav.com/results.aspx"    method="get"    className="flex w-1/2 max-w-[500px] min-w-[300px]"  >    <div      style={{ backgroundColor: "#222" }}      className=" relative mr-2 w-[60px] p-4  bg-[#3D3D3DFF]  bg-center bg-no-repeat"    >      <svg data-v-30f7c911="" version="1.1" viewBox="0 0 129 129" svg-inline="" role="presentation" focusable="false">        <g data-v-30f7c911="">          <path            data-v-30f7c911=""            fill="white"            d="M51.6,96.7c11,0,21-3.9,28.8-10.5l35,35c0.8,0.8,1.8,1.2,2.9,1.2s2.1-0.4,2.9-1.2c1.6-1.6,1.6-4.2,0-5.8l-35-35   c6.5-7.8,10.5-17.9,10.5-28.8c0-24.9-20.2-45.1-45.1-45.1C26.8,6.5,6.5,26.8,6.5,51.6C6.5,76.5,26.8,96.7,51.6,96.7z M51.6,14.7   c20.4,0,36.9,16.6,36.9,36.9C88.5,72,72,88.5,51.6,88.5c-20.4,0-36.9-16.6-36.9-36.9C14.7,31.3,31.3,14.7,51.6,14.7z"          />        </g>      </svg>      <input        type="submit"        className=" text-transparent w-full h-full absolute top-0 right-0 cursor-pointer"        value="search"      />    </div>    <input      name="q"      type="text"      placeholder="Search..."      className="custom_placeholder   w-full text-base h-[60px]  p-4 bg-[#222] text-white  transition-all duration-150"    />    <input name="gd" value="RD1003138" />    <input name="n" value="7771" />    <input name="searchsource" value="69" />  </form>);
Search destination
    • find.wsrcnav.com

    Receives new-tab search requests from the extension form, including q, gd, n, and searchsource URL parameters.

Where it sends data

Destinations our analysis observed Google Chrome New Tab page customization contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • find.wsrcnav.com

    Google Chrome New Tab page customization sends data to find.wsrcnav.com. No other extension we have analysed sends data here.

Updated 30 September 2026fkfobiagdiioemjmpdecklcjaplpljdo