Is Recipes safe?
Recipes is medium risk. When you search from the address bar, Recipes routes queries and suggestions to recipesapp.com. It keeps a long-lived uid cookie backed by chrome.storage.sync, so requests stay linked to the same profile even after the cookie is deleted.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Findings
Search terms go to recipesapp.com with a persistent uid cookie
When you search from the address bar, Recipes routes queries and suggestions to recipesapp.com.
It keeps a long-lived uid cookie backed by chrome.storage.sync, so requests stay linked to the same profile even after the cookie is deleted.
- Severity
- Medium unwanted
- Type
- Unexpected
- CWE
- CWE-359
- Source
- Dynamic sandbox
The user performs a browser search after the Recipes search provider is active.
The extension sends the search or suggestion term to recipesapp.com and maintains a long-lived uid cookie for that site.
- Your search termschicken soup recipes (illustrative)
The text you type into the browser search box can reveal interests, plans, or questions.
- Recipes uid cookieuid=8f14e45f-ea2b-4b5c-9a8d-123456789abc (illustrative)
A stable cookie can link multiple searches from the same browser profile over time.
- Synced storage uid8f14e45f-ea2b-4b5c-9a8d-123456789abc (illustrative)
A copy in extension storage can restore the same uid cookie after the cookie is deleted.
What it can do
Permissions this extension asks for, as declared in version 1.0.0.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on recipesapp.com
https://recipesapp.com/*
Store data in your browser
storage
Read and change cookies, including the ones that keep you signed in
cookies