Is HackBar safe?
HackBar stores active-tab POST form data and request headers so its devtools panel can replay them.
When a main-frame page submits a POST, HackBar stores the active tab's URL, form fields, and selected request headers, including cookies, referrer, and user-agent, in its background script. Its devtools panel can read that stored data back for replay inside the extension. No external recipient is identified in the reviewed claim.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 2.3.1. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on every site you visit
<all_urls>
See the address and title of every tab you have open
tabs
Act on the current tab, but only after you click the extension
activeTab
Watch every request your browser makes
webRequest
Watch, block and rewrite every request your browser makes
webRequestBlocking
Store data in your browser
storage