Is Side Panel for Gemini safe?
Side Panel for Gemini removes security headers from every page in the browser and sets Access-Control-Allow-Origin to wildcard on install.
On installation, the extension adds a browser-wide declarativeNetRequest rule that strips Content-Security-Policy, X-Frame-Options, frame-ancestors, and X-Content-Type-Options response headers from all main and sub-frame requests across every site visited. It also forces the Access-Control-Allow-Origin header to '*' on those same responses. These changes apply globally with no domain filter, weakening cross-site isolation and clickjacking protections for every page loaded in the browser.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itorliesaurus - no other listings under this identity
orliesaurus - no other listings under this identity
What this publisher told the store about itself, and the other listings that told it the same thing.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 0.5.6. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on google.com
*://*.google.com/*
Read and change your data on googleusercontent.com
*://*.googleusercontent.com/*
Read and change your data on googletagmanager.com
*://*.googletagmanager.com/*
Block and redirect the requests your browser makes
declarativeNetRequest
Show a panel beside the page
sidePanel
Store data in your browser
storage