Is Multi View for Paramount+ - Watch Multiple Streams safe?
Multi View for Paramount+ strips X-Frame-Options and Content-Security-Policy from every paramountplus.com page, not just its own frames.
To let its multi-view layout embed several Paramount+ streams in iframes, the extension installs a network-wide rule that removes the X-Frame-Options and Content-Security-Policy response headers on all paramountplus.com page loads, including top-level navigation. Because the rule isn't limited to the extension's own frames, any website can also embed live paramountplus.com pages in an iframe for a user who has this extension installed. The extension does not send any data to outside servers; the source shows no network calls beyond paramountplus.com.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itHideApp LLC - 37 other listings from the same operator, 2 of them carrying a finding
HideApp LLC - 37 other listings from the same operator, 2 of them carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same store account
37 other listings published from this account, 266k+ users between them. 2 of them carry a finding.
Shared hosts - 1 hostname
Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.