Is Planyway for Trello safe?

Question

Accepted Answer

Planyway for Trello is high risk. Code analysis shows that Planyway's exchange frame accepts request messages from any embedding parent page. A parent page that loads the exchange URL can ask the extension script to make Planyway or Trello requests, add stored session or token headers, and post the response back to the parent page configured in the URL.

Is Planyway for Trello: Calendar, Timeline, Time Tracking and Reports safe?

Findings