Is Quest PDF safe?

Medium risk

Quest PDF sets itself as the default search provider and sends search and suggestion terms to QuestPDF and Yahoo endpoints.

Quest PDF declares a default browser search provider that routes searches through Yahoo with extension-specific parameters. Its suggestion and omnibox handlers also send typed search queries to suggesting.questpdfapp.com for completion results.

To Go Networksv1.0.4Firefox Add-ons
45Risk
Who publishes it

To Go Networks - no other listings under this identity, 2 shared hostnames

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
To Go Networks

Shared hosts - 2 hostnames

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

questpdfapp.com
Also called by 1 other listing: Quest PDF
suggesting.questpdfapp.com
Also called by 1 other listing: Quest PDF

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

Quest PDF sends search terms to QuestPDF and Yahoo endpoints.

Using the browser search box or Quest PDF omnibox suggestions routes text to QuestPDF and Yahoo endpoints.

Confirmed data shows default URLs with your search terms, plus omnibox handlers fetching suggestions and opening Yahoo results.

Severity
Medium unwanted
Type
Unexpected
CWE
CWE-359
Source
Dynamic sandbox
What actually happens
You did this

The user performs a browser search or enters omnibox text for Quest PDF suggestions.

The extension did this

Quest PDF routes the search or suggestion terms to QuestPDF and Yahoo endpoints.

Captured request
GETsuggesting.questpdfapp.com/complete/search; suggesting.questpdfapp.com?q={searchTerms}; search.yahoo.com/yhs/search
Fields in the request
  • Search or suggestion URL
    https://suggesting.questpdfapp.com/complete/search?q=invoice%20template (illustrative)

    The request URL carries the user's search or suggestion terms to the remote endpoint.

What it can do

Permissions this extension asks for, as declared in version 1.0.4. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on questpdfapp.com

    *://*.questpdfapp.com/*

  • Store data in your browser

    storage

Where it sends data

Destinations our analysis observed Quest PDF contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • search.yahoo.comwidely used

    Quest PDF sends data to search.yahoo.com. A widely used service: 39 other extensions we have analysed send data here.

  • suggesting.questpdfapp.com

    Quest PDF sends data to suggesting.questpdfapp.com. No other extension we have analysed sends data here.

Updated 30 September 2026amo-2876606