Is Tab Redesign - Split-Screen Layout safe?

Low risk

Tab Redesign stores login and payment identity from matching browser tab URLs without verifying the callback origin.

Tab Redesign watches updated tabs for login or payment success URL patterns, then stores the app ID, email address, and subscription end time from the URL in extension storage. The check relies on URL substrings rather than a verified callback origin, so a matching page URL can change the extension's stored license identity. Its checkout page also sends the stored email and subscription fields to the vendor payment server when loading prices or starting payment.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

LINGHAN XU Sole Proprietorv1.5Chrome Web Store
15Risk
Who publishes it

LINGHAN XU Sole Proprietor - 1 other listing from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
LINGHAN XU Sole Proprietor

Same store account

1 other listing published from this account, 377 users between them, none of them carrying a finding.

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed Tab Redesign - Split-Screen Layout contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • crx.tabredesign.com

    Tab Redesign - Split-Screen Layout sends data to crx.tabredesign.com. No other extension we have analysed sends data here.

Updated 30 September 2026ioofiiojnkangojlgcgejhboacecekgk