Is Revision History safe?

Question

Accepted Answer

Revision History is medium risk. The extension's manifest grants every page hosted on vercel.app — a platform with millions of active app deployments — permission to send Chrome runtime messages directly to the extension's background service worker. We observed Chrome honoring this grant: a message sent from a vercel.app page during testing was delivered to the extension and processed. A secondary origin check in the handler returned a structured error response, but this response itself confirms the extension is installed in the visitor's browser. The vercel.app entry in the manifest appears to be a leftover from early development when the companion web app was hosted on Vercel, not removed before the extension was published. While the runtime check prevents the authentication flow from completing for Vercel senders, the manifest grant means any Vercel-hosted page can reliably determine whether this extension is installed.

Is Revision History: Writing Process Visibility for Google Docs & Slides safe?

Findings