Is PDF editor online safe?

Question

Accepted Answer

PDF editor online is high risk. We observed that every time you navigate to a webpage, this extension sends the full URL of that page to a server at offidocs.com. The request also includes a persistent identifier unique to your browser install. Our dynamic analysis captured six outbound requests during a five-site browsing session — one for each of google.com, amazon.com, facebook.com, wikipedia.org, and reddit.com — with the full URL hex-encoded in the query string. Only offidocs.com pages are excluded. The extension's stated purpose is PDF editing; this URL reporting is not disclosed in the Chrome Web Store listing. When the extension installs, it generates a 10-character random identifier and saves it to your browser's local storage under the key 'offidocs_key'. This identifier never expires and is not tied to any account you create. Our dynamic analysis confirmed the value 'jlccki5gto' present in storage and matching the 'u=' parameter across all seven outbound requests captured in the session. The same ID is used by both the background script and the popup, so every action the extension takes can be correlated to the same browser install over time.

Is PDF editor online safe?

Findings