Is 千问 Sidebar · 划词翻译 / AI 侧边栏 / 一键导出 Markdown safe?
The extension removes CSP and X-Frame-Options headers across sites and accepts frame messages that submit text to Qwen.
The extension installs a browser rule for all URLs that removes Content-Security-Policy and X-Frame-Options response headers from pages, frames, XHRs, and WebSockets. In iframes, its content script listens for message commands without checking the sender origin; a matching message can paste supplied text into the Qwen chat box and click send.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itredreamzishao - 4 other listings from the same operator, none carrying a finding
redreamzishao - 4 other listings from the same operator, none carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same store account
4 other listings published from this account, 11k+ users between them, none of them carrying a finding.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed 千问 Sidebar · 划词翻译 / AI 侧边栏 / 一键导出 Markdown contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- www.qianwen.com
千问 Sidebar · 划词翻译 / AI 侧边栏 / 一键导出 Markdown sends data to www.qianwen.com. 2 other extensions we have analyzed send data here.