Is Mock:Intercept and directly return data safe?

Mock:Intercept and directly return data exposes saved mock rules to every page and lets page messages change request hooks.

Mock:Intercept and directly return data posts stored mock rules into every page where its content script runs. Its injected page script listens for mockPluginIntercepter window messages without origin checks, so frames can change the page's fetch and XMLHttpRequest mock rules for later requests.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.