Is OmniDefend SSO Extension safe?
Low risk
OmniDefend SSO Extension accepts forged postMessage tokens without origin validation, allowing any web page to read the Windows username when Windows autologin is configured.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
20Risk
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.