Is Super Drag for Google Chrome safe?
Super Drag exposes its tab-opening handler to all web pages with no sender validation, letting any site open new tabs or trigger searches.
Super Drag is a drag-gesture extension that lets users open links or search selected text by dragging. Its service worker listens for messages via chrome.runtime.onMessage and responds by creating new tabs or performing searches. Because externally_connectable.matches covers all http and https origins and the handler performs no sender validation, any web page can invoke this behavior by calling chrome.runtime.sendMessage with a crafted URL or search term.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 0.9.16. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to. The current listed version is 1.0.40, which we have not unpacked yet.
Read and change your data on every site you visit
http://*/*
Read and change your data on every secure site you visit
https://*/*
Run its own code inside the pages you visit
scripting
Store data in your browser
storage
See the address and title of every tab you have open
tabs