Is Internet Archive Downloader safe?

Low risk

Internet Archive Downloader sets CORS headers on archive.org responses to allow credentialed cross-origin fetches when downloading books.

The extension injects content scripts into archive.org and babel.hathitrust.org pages to add download buttons for books and PDFs. On install, it installs a declarativeNetRequest rule that sets Access-Control-Allow-Origin and Access-Control-Allow-Credentials on responses to any request originating from archive.org, allowing those pages to make credentialed cross-origin requests. The extension does not transmit user data to any remote server; all activity is local or directed at archive.org and hathitrust.org.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Element Davvv1.2.4Firefox Add-ons
16Risk
Who publishes it

Element Davv - no other listings under this identity, 2 shared hostnames

What this publisher told the store about itself, and the other listings that told it the same thing.

Shared hosts - 2 hostnames

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

hathitrust.org
Also called by 4 other listings, including WikiTree Sourcer, WikiTree Sourcer
babel.hathitrust.org
Also called by 5 other listings, including WikiTree Sourcer, WikiTree Sourcer

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 1.2.4. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on archive.org

    https://archive.org/*

  • Read and change your data on us.archive.org

    *://*.us.archive.org/*

  • Read and change your data on babel.hathitrust.org

    https://babel.hathitrust.org/*

  • Read and change your data on elementdavv.github.io

    https://elementdavv.github.io/*

  • Block and redirect the requests your browser makes

    declarativeNetRequest

  • Start, monitor and manage your downloads

    downloads

  • Show you desktop notifications

    notifications

  • Run its own code inside the pages you visit

    scripting

  • Store data in your browser

    storage

  • See the address and title of every tab you have open

    tabs

  • Store an unlimited amount of data in your browser

    unlimitedStorage

Updated 2 November 2026amo-2801196