Is Google Traduction safe?

Medium risk

Google Traduction sends selected text from any website to softnour.com for translation.

The extension runs a content script on all websites except Google Translate and shows a translation button after text is selected. When the button is clicked, it reads the selected text and sends it as a query parameter to softnour.com, then displays the returned translation or opens Google Translate as a fallback.

adnanev1.2Firefox Add-ons
48Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

Selected page text is sent to Softnour for translation

Selecting text and clicking the injected translation button sends the selected text to Softnour's TranslateAPI endpoint.

That content can include page text or form input, depending on what you highlight.

Severity
Medium unwanted
Type
Unexpected
CWE
CWE-359
Source
Dynamic sandbox
What actually happens
You did this

The user selects text on a page and clicks the injected translation button.

The extension did this

The extension reads the selected text and sends it to Softnour's TranslateAPI endpoint for translation.

Captured request
GEThttps://softnour.com/GlobalPay/Ad-free_access/iFramesTools/TranslateAPI.php
Fields in the request
  • Selected page text
    Article paragraph selected by the user (illustrative)

    Text selected from the page is sent for translation and may reveal the content being read.

  • Selected form text
    Draft message text selected by the user (illustrative)

    If the selection comes from a form field, the transmitted text can include what the user typed there.

What it can do

Permissions this extension asks for, as declared in version 1.2. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every site you visit

    <all_urls>

  • Act on the current tab, but only after you click the extension

    activeTab

  • Add items to the right-click menu

    contextMenus

  • See the address and title of every tab you have open

    tabs

Where it sends data

Destinations our analysis observed google-traduction-0_ contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • softnour.com

    google-traduction-0_ sends data to softnour.com. 2 other extensions we have analysed send data here.

Updated 30 September 2026amo-2818836