Is Qwen safe?
Qwen removes framing protections from qwen.ai pages so they can load inside frames while the extension is installed.
Qwen registers a browser rule for qwen.ai pages that removes Content Security Policy, X-Frame-Options, frame-related protections, and X-Content-Type-Options headers, then sets Access-Control-Allow-Origin to '*'. The rule applies to qwen.ai main-frame and sub-frame responses, so these protections can be weakened for Qwen pages generally rather than only inside the extension side panel.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes ittiktokextensions - 2 other listings from the same operator, none carrying a finding
tiktokextensions - 2 other listings from the same operator, none carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same store account
2 other listings published from this account, 103k+ users between them, none of them carrying a finding.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed Qwen contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- chat.qwen.ai
Qwen sends data to chat.qwen.ai. No other extension we have analysed sends data here.