Is TouchEn PC보안 safe?

Question

Accepted Answer

TouchEn PC보안 is medium risk. Every website you visit receives access to a JavaScript function, window.touchenex_nativecall(), injected by this extension. Because the extension does not verify which website is calling that function, any page—not only authorized RaonSecure portals—can send commands to the TouchEn security application installed on your computer. Dynamic analysis confirmed that calling this relay from an unrelated website successfully opened a connection to the local kr.co.raon.touchenex native host. A two-step sequence available to any origin (an initialization call that registers the current browser tab, followed by arbitrary native messaging commands) bypasses the tab-registration gate that was intended to limit access.

Is TouchEn PC보안 확장 safe?

Findings