Is Search All safe?

Medium risk

Search All routes Amazon and eBay searches through affiliate links and injects a promotional iframe into Google results.

When a user runs an Amazon search through the extension, the URL is rewritten to include a hardcoded affiliate tag ('diigo0c-20'). eBay and Newegg searches are routed through the go.redirectingat.com affiliate redirector. On Google search pages, the extension also inserts a sider.ai promotional iframe into the results sidebar on each navigation, which the user can dismiss to suppress future appearances.

Screen Recorderv2.2.30Chrome Web Store
45Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

SeverityMEDIUM
ClassUNWANTED
TypeUnexpected
CWECWE-506
SourceAI SANDBOX

Search All adds a Sider.ai frame to Google results

On a Google search results page, Search All checks a promotion flag, then prepends a Sider.ai iframe into the results column.

The iframe loads https://sider.ai/search-landing with fixed campaign parameters and a browser-family value.

01EvidenceCAUSE EFFECT
What actually happens
You did this

You load a Google search results page.

The extension did this

The extension adds a Sider.ai recommendation frame to the results sidebar when its promotion flag is still enabled.

The frame is added to the page before the extension checks whether its own search bar should be shown.

02EvidenceFIELD TABLE
Concrete fields used for the remote iframe request
FieldValueWhy it matters
Remote host
sider.aiThis is the outside site loaded inside your Google results page.
Campaign source
source=sa&p1=gsideThis labels the frame load as coming from the Search All extension integration.
Browser family
p2=chromeThis tells the landing page whether the extension is running in Chrome or Edge.
Page condition
https://www.google.com/search?q=weatherThe behavior is tied to Google result-page navigation, so the frame load occurs in that browsing context.
03EvidenceNETWORK CAPTURE
Captured request
GEThttps://sider.ai/search-landing?source=sa&p1=gside&p2=chrome
04EvidenceDOM DIFF
Page DOM modified

Target: the right-side column of Google search results

The extension prepends a promotional iframe and a dismissal control into the Google results sidebar.

Before
<div id="rhs"></div>
After (modified by extension)
<div id="rhs">
  <div id="pDiv" style="margin-bottom: 20px;">
    <iframe src="https://sider.ai/search-landing?source=sa&p1=gside&p2=chrome" style="border: none;"></iframe>
    <div id="promotion-stop-btn">Stop seeing this recommendation</div>
  </div>
</div>
05EvidenceCODE COMPARE
The code that does this

The shipped code path that inserts the Sider.ai frame

What it actually does
Google tab navigation triggers a content-script messagejs/serviceWorker.js
chrome.tabs.onUpdated.addListener(function (tabId, changeInfo, tab) {
  console.log("update", tabId, changeInfo, tab);
  if (changeInfo.status == "loading") return;
  var host = tab.url;
  var hostmatch = host.match(/\.(.*?)\./);
  var hostname;
  console.log("hostmatch", hostmatch);
  if (hostmatch == null) {
    if (host.match(/(.*?)\./)) {
      hostname = host.match(/(.*?)\./)[1];
    }
  } else {
    hostname = hostmatch[1];
  }
  console.log(hostname);
  if (hostname) {
    if (hostname == "google") {
      //chrome.tabs.executeScript(tabId, {file: 'js/contentscript.js'});
      chrome.tabs.sendMessage(tabId, { action: "tabupdate" }).catch(() => {});
    }
    chrome.tabs.sendMessage(tabId, { action: "startdetect" }).catch(() => {});
    chrome.tabs.sendMessage(tabId, { action: "insertChango" }).catch(() => {});
  }
});
The content script asks whether the promotion should be shownjs/contentscript.js
addbar: function () {
  //console.trace();
  HOST = window.location.host;
  URL = window.location.href;
  //var query = Search.issearch(HOST,URL);
  //if(query.query){
  //    ISSEARCH = true;
  //    if(OPTION.switchbar=='false') return;
  //    this.showbar(query.query,query.hostname);
  //}
  chrome.runtime.sendMessage({ action: "getPromotion" }, function (response) {
    if (response) {
      addPromotion();
    }
  });
  if (OPTION.switchbar == "false") return;
  chrome.runtime.sendMessage({ action: "getsearchs" }, function (response) {
    var searchs = response.searchs;
    console.log("searchs", searchs);
    var queryHistory = response.querys;
    //console.log(queryHistory);
    for (i = 0; i < searchs.length; i++) {
      var cachehost = searchs[i]["searchurl"].match(/\/\/(.*?)\//)[1];
      if (HOST == cachehost || $.inArray(HOST, googleSites) != -1) {
        if (/google\.(.*)\/maps/.test(URL)) {
          return;
        }
        var querykey = searchs[i]["searchurl"].match(
          /[&|\?]([-\=\w]+)\{%s\}/
        );
        if (querykey) {
          querykey = querykey[1];
        } else {
          querykey = "special";
        }
        //console.log(querykey);
        Search.removebar();
        var searchUrl = searchs[i]["searchurl"];
        Search.showbar(searchs, querykey, cachehost, queryHistory, searchUrl);
        break;
      }
    }
    //Search.showbar(searchs); //for test
  });
}
The background page enables the promotion unless the user dismissed itjs/bg.js
case "closePromotion":
  localStorage["promotion"] = false;
  break;
case "getPromotion":
  sendResponse(localStorage["promotion"] !== "false");
  break;
The content script constructs and prepends the Sider.ai iframejs/contentscript.js
function addPromotion() {
  var pDiv = document.getElementById("pDiv");
  if (pDiv) {
    return;
  }
  var pDiv = document.createElement("div");
  var iframe = document.createElement("iframe");
  iframe.src =
    "https://sider.ai/search-landing" +
    "?source=sa&p1=gside&p2=" +
    (/Edg/.test(navigator.userAgent) ? "edge" : "chrome");
  iframe.style.border = "none";
  pDiv.id = "pDiv";
  pDiv.style.marginBottom = "20px";
  pDiv.appendChild(iframe);
  var stopBtn = document.createElement("div");
  stopBtn.id = "promotion-stop-btn";
  stopBtn.innerText = "Stop seeing this recommendation";
  stopBtn.addEventListener("click", function () {
    chrome.runtime.sendMessage({ action: "closePromotion" });
    pDiv.style.display = "none";
  });
  pDiv.appendChild(stopBtn);
  var col = document.getElementById("rhs");
  if (col) {
    col.prepend(pDiv);
  }

  window.addEventListener("message", function (event) {
    console.log("messages", event);
    if (
      event.origin === "https://dev.wisehood.ai" ||
      event.origin === "https://sider.ai"
    ) {
      if (event.data.width) {
        iframe.width = event.data.width;
      }
      if (event.data.height) {
        iframe.height = event.data.height;
      }
    }
  });
}
06EvidenceTHIRD PARTY LIST
External host loaded by the inserted frame
  • sider.ai

    Receives the iframe page load for /search-landing with source=sa, p1=gside, and p2 set from the browser family.

  • dev.wisehood.ai

    Allowed as a postMessage origin for resizing messages to the inserted iframe, alongside sider.ai.

Data recipients

go.redirectingat.comwww.amazon.comsider.ai
Updated 17 September 2026kpdkbemdpepjjppbfgeapjienologapa