Is Twitch™ Adblocker Plus 2.0 safe?

Twitch Adblocker Plus 2.0 exposes its stored settings to any page you visit via an unauthenticated postMessage listener.

A content script runs on every website and replies to any page's window.postMessage request with the extension's stored settings, including the user's Twitch channel whitelist and proxy URL. The reply listener does not check the origin of the request or the sender of the reply, so any script running on any page the user visits can read these values by sending the right message.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.