Is Smart popup blocker safe?

Question

Accepted Answer

Smart popup blocker is high risk. Every 24 hours — and immediately on install — this extension asks popblockersmart.com whether its network blocking rules need updating. If the server says yes, the extension fetches a JSON ruleset from a second server-controlled URL and replaces every dynamic blocking rule in the browser with whatever that ruleset contains. This channel could be used to disable ad-blocking selectively, allow-list attacker-controlled domains, or redirect traffic — without any user notification. When you install this ad-blocker, it immediately queries every browser tab you have open and sends the hostnames of all those pages — along with a total tab count — to popblockersmart.com before the extension finishes setting up. This gives the operator a snapshot of what you were browsing at the moment of install, linked to your extension's runtime ID. 1 further issue was flagged.

Is Smart popup blocker safe?

Findings