Is POE Trade zh safe?
POE Trade zh fetches remote translation data from GitHub daily and writes it into page content on pathofexile.com without sanitization.
The extension retrieves JSON translation files from a GitHub repository every 24 hours and stores them locally. When rendering translations on Path of Exile trade pages, the content script writes fetched data directly into innerHTML without sanitization, meaning a compromised or modified GitHub-hosted file could inject arbitrary HTML into pathofexile.com pages. The extension does not send user data to external servers; its only external contact is fetching translation files from raw.githubusercontent.com.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 3.28.1. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on www.pathofexile.com
https://www.pathofexile.com/trade/*
Read and change your data on pathofexile.com
https://pathofexile.com/trade/*
Read and change your data on pathofexile.tw
https://pathofexile.tw/trade/*
Read and change your data on github.com
https://github.com/*
Read and change your data on raw.githubusercontent.com
https://raw.githubusercontent.com/*
Store data in your browser
storage
Store an unlimited amount of data in your browser
unlimitedStorage