Is Spotify Adblock safe?
Spotify Adblock lets cross-origin frames read the current page URL and inject elements into the page.
Spotify Adblock installs a content script on most websites and listens for window messages without checking the sender's origin. A cross-origin child frame can ask the extension to return the top page URL or append caller-chosen elements into the page. On open.spotify.com, it also rewrites the Content-Security-Policy response header to allow inline scripts and eval.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itSpoti - no other listings under this identity
Spoti - no other listings under this identity
What this publisher told the store about itself, and the other listings that told it the same thing.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 2.0.8. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on every site you visit
*://*/*
Block and redirect the requests your browser makes
declarativeNetRequest
Run its own code inside the pages you visit
scripting
Store data in your browser
storage
See the address and title of every tab you have open
tabs