Is Live Chat Overlay safe?
Live Chat Overlay sends browser language, timezone, and YouTube video ID to its server on every live chat page load and injects the server's response into the page without sanitization.
Each time a YouTube live chat page loads, the extension automatically POSTs the user's browser language, timezone, and the current video ID to chat.aaronpk.tv/featured.php. The server response is used to construct and inject an HTML element directly into the page body; the response values are not validated or escaped before insertion. A server returning crafted content could cause arbitrary HTML to appear on the page.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.