Is PrinterLogic Extension safe?

Question

Accepted Answer

PrinterLogic Extension is medium risk. The PrinterLogic Extension loads a message listener on every website you visit. If a page contains an element with the id printerLogicClientInterface — something any script running on that page can add to the page itself, with no PrinterLogic account or click required — the extension opens a channel to the PrinterLogic client software installed on your computer and relays commands from that page's own JavaScript to it. The extension only checks that a message came from the same window, not which website sent it. We confirmed this during dynamic analysis: after adding the marker element to an unrelated test page and sending a command from that page's own script, the extension forwarded the command to the PrinterLogic native application and returned its response to the page. What a page can actually accomplish through this path depends on which commands the installed PrinterLogic client accepts.

Is PrinterLogic Extension v1.0.6.1 safe?

Findings