Is Live Chat Overlay safe?
Live Chat Overlay sends browser language, timezone, and YouTube video ID to its server on every live chat page load and injects the server's response into the page without sanitization.
Each time a YouTube live chat page loads, the extension automatically POSTs the user's browser language, timezone, and the current video ID to chat.aaronpk.tv/featured.php. The server response is used to construct and inject an HTML element directly into the page body; the response values are not validated or escaped before insertion. A server returning crafted content could cause arbitrary HTML to appear on the page.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itBackpedal TV - no other listings under this identity
Backpedal TV - no other listings under this identity
What this publisher told the store about itself, and the other listings that told it the same thing.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 0.3.9. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on youtube.com
https://youtube.com/*
Read and change your data on www.youtube.com
https://www.youtube.com/*
Read and change your data on studio.youtube.com
https://studio.youtube.com/*
Store data in your browser
storage
Where it sends data
Destinations our analysis observed Live Chat Overlay contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- chat.aaronpk.tv
Live Chat Overlay sends data to chat.aaronpk.tv. No other extension we have analyzed sends data here.