Is Mermaid Graphical Editor safe?

Question

Accepted Answer

Mermaid Graphical Editor is medium risk. When you click the Mermaid Graphical Editor extension, it injects an editor iframe into the active tab and fills it with the extension's cached Mermaid diagram text. Because that iframe is a same-origin srcdoc frame without sandboxing, JavaScript on the active page can read the textarea containing that cached diagram text.

Is Mermaid Graphical Editor safe?

Findings