Is Mermaid Graphical Editor safe?
Mermaid Graphical Editor exposes cached diagram text to the active page when you open its editor.
When you click the extension, it injects its editor into the active tab and fills it with cached Mermaid diagram text from extension storage. Because the editor is placed in an unsandboxed same-origin srcdoc iframe, scripts on that page can read the cached diagram text from the injected textarea.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 0.5.7. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Act on the current tab, but only after you click the extension
activeTab
Run its own code inside the pages you visit
scripting
Store data in your browser
storage