Is Pitch Shifter safe?
Pitch Shifter adds permissive CORS headers to media responses while the extension is installed.
Pitch Shifter uses a browser network rule to set access-control-allow-origin to * on GET media responses that do not already include that header. The rule applies to media responses covered by its host permissions, including YouTube and Googlevideo URLs, which can make those responses readable from web origins that would otherwise be blocked by CORS.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 2.1.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on www.youtube.com
https://www.youtube.com/*
Read and change your data on youtube.com
https://youtube.com/*
Read and change your data on googlevideo.com
https://*.googlevideo.com/*
Read and change your data on pitch-shift--pitch-shift-client-asgi-app.modal.run
https://pitch-shift--pitch-shift-client-asgi-app.modal.run/*
Read and change your data on localhost:3000
http://localhost:3000/*
Act on the current tab, but only after you click the extension
activeTab
Store data in your browser
storage
See the address and title of every tab you have open
tabs