Is Solo Leveling Wallpaper safe?
Solo Leveling Wallpaper sends top-site URLs from the new-tab page to Google's favicon service.
When the extension's custom new-tab page opens, it asks Chrome for the browser's top sites and displays up to 10 of them. For each displayed site, it loads an icon from Google's favicon service with the visited site's URL included as the domain parameter.
Who publishes italice.ng - 2 other listings from the same operator, none carrying a finding
alice.ng - 2 other listings from the same operator, none carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same store account
2 other listings published from this account, 4k+ users between them, none of them carrying a finding.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Findings
New-tab page sends your top sites' URLs to Google's favicon service
Opening a new tab loads a replacement page that requests chrome.topSites, then builds a favicon icon for each entry, sending the full top-site URL to Google as a query parameter.
- Severity
- Medium unwanted
- Type
- Unexpected
- CWE
- CWE-359
- Source
- Dynamic sandbox
You open a new browser tab.
The extension's new-tab page fetches your top sites and requests a Google-hosted favicon icon for each one, sending each top site's full URL to google.com in the request.
This repeats for every top site shown, up to 10 per new tab.
Top sites become Google favicon request URLs
Background service worker returns your top sites on request
HalLeN652MeGe202bg.jschrome.runtime.onMessage.addListener(function (message, sender, sendResponse) { if (message.topSites) { chrome.topSites.get(function (sites) { sendResponse(sites); }); return true; // keep the message channel open for the async response }});New-tab page turns each top site into a Google favicon request
js/mostvisited.jsfunction renderTopSites() { chrome.runtime.sendMessage({ topSites: true }, function (sites) { var count = 0; if (sites != null) { for (var i = 0; i < sites.length && count < 10; i++) { var site = sites[i]; var faviconUrl = 'https://www.google.com/s2/favicons?domain=' + encodeURIComponent(site.url); $('#topsites_menu').append( '<li><a href="' + site.url + '">' + '<i style="background-image:url(\'' + faviconUrl + '\')"></i>' + site.title + '</a></li>' ); count++; } } });}renderTopSites();(illustrative) 200 OK, PNG favicon image for the requested domain.
- www.google.com
Receives each top site's full URL as a favicon lookup query parameter on every new tab you open.
The extension defines no content scripts or host permissions; this behavior is confined to its chrome://newtab replacement page. Google receives the top-site URL in the favicon request, not the page title shown in the new-tab list.
What it can do
Permissions this extension asks for, as declared in version 7.31.1.45. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read the sites you visit most
topSites
Store an unlimited amount of data in your browser
unlimitedStorage
Store data in your browser
storage
Run searches with your default search engine
search
Where it sends data
Destinations our analysis observed Solo Leveling Wallpaper contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- www.google.comwidely used
Solo Leveling Wallpaper sends data to www.google.com. A widely used service: 153 other extensions we have analysed send data here.