Is miniOrange Secure Single Sign-On safe?
miniOrange Secure Single Sign-On fills saved logins into web forms using credentials fetched from a configurable miniOrange SSO server.
The extension runs on all pages and, when a login is needed, sends an application ID and session ID to its configured miniOrange SSO backend, then fills the returned username and password into detected login fields. The backend address is stored in extension storage and can be changed by a web page that contains a specific hidden element or an /enduserwelcome or /idplogin URL, and a page message listener without an origin check can set allowlist entries.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itXecurify Inc - no other listings under this identity
Xecurify Inc - no other listings under this identity
What this publisher told the store about itself, and the other listings that told it the same thing.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 4.0.55. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on every secure site you visit
https://*/*
Read and change your data on every site you visit
http://*/*
Store data in your browser
storage
Change your browser's privacy and security settings
privacy
See, disable and uninstall your other extensions, including your security ones
management
Read and change cookies, including the ones that keep you signed in
cookies
See the address and title of every tab you have open
tabs
Run its own code inside the pages you visit
scripting
Add items to the right-click menu
contextMenus