Is Side Panel for Gemini safe?

Side Panel for Gemini removes security headers from every page in the browser and sets Access-Control-Allow-Origin to wildcard on install.

On installation, the extension adds a browser-wide declarativeNetRequest rule that strips Content-Security-Policy, X-Frame-Options, frame-ancestors, and X-Content-Type-Options response headers from all main and sub-frame requests across every site visited. It also forces the Access-Control-Allow-Origin header to '*' on those same responses. These changes apply globally with no domain filter, weakening cross-site isolation and clickjacking protections for every page loaded in the browser.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.