Is אתרים במייל safe?
Medium risk
אתרים במייל rewrites cookies and removes framing protections for sites it opens from Gmail or Chat.
When you open a site inside the extension's Gmail or Chat iframe, it can request permission for that site and add dynamic network rules for granted domains. Those rules remove Content-Security-Policy and X-Frame-Options headers, append SameSite=None; Secure to Set-Cookie headers, and rewrite non-Google cookies so the framed site can stay logged in.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
40Risk
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.