Is Pilot Solution Extension safe?

Question

Accepted Answer

Pilot Solution Extension is high risk. When you sign in to Pilot Solution Extension while using WhatsApp Web, the extension stores the CRM identity token in WhatsApp Web page localStorage under the web.whatsapp.com origin. That places a credential-like session token and related profile storage data in page-origin storage instead of extension-private storage. When you log in to Pilot Solution Extension, the extension reads the Pilot username and password from the login form. It sends those credentials to api.pilotsolution.net in a GET request URL, which can place the login values in URL logs and other URL-handling records.

Is Pilot Solution Extension safe?

Findings