Is TabBoost safe?

Low risk

TabBoost removes iframe and content-security headers from pages and subframes by default.

TabBoost ships enabled declarativeNetRequest rules that remove Content-Security-Policy, X-Frame-Options, and related headers from main-frame and sub-frame responses across all sites. For subframes, it also sets Access-Control-Allow-Origin to *, which can make framed pages load in ways the site normally tries to prevent.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

samzongv2.6.0Chrome Web Store
17Risk
Who publishes it

samzong - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 2.6.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every site you visit

    <all_urls>

  • Act on the current tab, but only after you click the extension

    activeTab

  • Store data in your browser

    storage

  • Show you desktop notifications

    notifications

  • Write to your clipboard

    clipboardWrite

  • Run its own code inside the pages you visit

    scripting

  • Block and redirect the requests your browser makes

    declarativeNetRequest

commands
Updated 30 September 2026pnpabkdhbbjmahfnhnfhpgfmhkkeoloe