Is InCognito safe?
InCognito is medium risk. Clicking the follow button makes InCognito read your LinkedIn JSESSIONID cookie and use it as a csrf-token header, sending an authenticated POST to LinkedIn's Voyager profileActions endpoint to follow the developer's account.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Findings
InCognito uses LinkedIn session cookie for authenticated follow request
Clicking the follow button makes InCognito read your LinkedIn JSESSIONID cookie and use it as a csrf-token header, sending an authenticated POST to LinkedIn's Voyager profileActions endpoint to follow the developer's account.
- Severity
- Medium unwanted
- Type
- Unexpected
- CWE
- CWE-200
- Source
- Dynamic sandbox
The user clicks the extension's follow button.
The extension reads the LinkedIn JSESSIONID cookie and uses it to send an authenticated follow request.
- Your LinkedIn session cookieJSESSIONID=ajax:1234567890123456789 (illustrative)
This cookie is used as a csrf-token header for the authenticated LinkedIn follow request.
What it can do
Permissions this extension asks for, as declared in version 2.0.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Store data in your browser
storage
Run hidden pages in the background
offscreen