Is NoTab - link preview assistant|translation|search safe?

Low risk

NoTab removes security headers from every subframe loaded in the browser.

When installed, NoTab adds a browser network rule that applies to all subframe URLs. The rule removes Content-Security-Policy, X-Frame-Options, and Cookie response headers from matching subframe requests, not just from NoTab's own preview iframe.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

17Risk
Who publishes it

ZYi - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
ZYi

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 1.26. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every site you visit

    <all_urls>

  • Store data in your browser

    storage

  • Act on the current tab, but only after you click the extension

    activeTab

  • Add items to the right-click menu

    contextMenus

  • Show a panel beside the page

    sidePanel

  • Block and redirect the requests your browser makes

    declarativeNetRequest

Updated 30 September 2026anfjigoimfhbhkcpggoomegmafgmnada