Is Smallppt safe?

Low risk

Smallppt removes Content-Security-Policy and X-Frame-Options headers from broadly matched HTTPS responses.

Smallppt installs a declarative network request rule that removes these protective response headers on main frames, subframes, XHR, and websocket requests. Its manifest grants broad HTTPS host access, so the rule can apply across HTTPS pages and subresources, not just Smallppt's own site or side panel.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

v1.0.3Chrome Web Store
17Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 1.0.3. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every secure site you visit

    https://*/*

  • Read and change your data on every site you visit

    <all_urls>

  • Show a panel beside the page

    sidePanel

  • Act on the current tab, but only after you click the extension

    activeTab

declarativeNetRequestWithHostAccess
Updated 30 September 2026fadilbobaidnmclcmbkknhcolcdabfkf