Is qTest Integration safe?

qTest Integration fetches any caller-supplied URL via the extension's broad host permissions, allowing pages to bypass CORS restrictions.

The extension is a workflow tool that autofills Jira, Rally, and VersionOne defect forms with data from qTest. Its service worker accepts a URL from any page via a message and fetches it using the extension's http://*/* and https://*/* host permissions, then returns the response to the page. This design lets any web page use the extension as a CORS proxy to retrieve content from origins it could not otherwise reach.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.