Is UAR_SKT safe?

var redirectpage = 'http://mydesk.sktelecom.com/Internet_deny.html'; // the deny page
var includeurl = 'chrome://'; // only chrome:// pages and the deny page itself are exempt

function SendURL_BeforeNavigate(details) {
  // Runs on every navigation in every tab; no addListener filter object was passed.
  if ((details.url == redirectpage) || (details.url == 'about:blank') || (details.url.includes(includeurl))) {
    return; // only these are ever skipped
  }

  compareURL(details.url); // sets the module-level `compareresult` flag
  if (compareresult) {
    chrome.tabs.update({ url: redirectpage }); // rewrite the tab before the real page loads
    connect();                                  // open a native-messaging port
    sendNativeMessage(details.url);              // relay the visited URL (covered by a separate claim)
  }
}

// No filter object, e.g. {url: [{hostContains: ...}]}, is passed here, so Chrome
// invokes this listener for every navigation the browser makes.
chrome.webNavigation.onBeforeNavigate.addListener(SendURL_BeforeNavigate);

function compareURL(currentURL) {
  // A commented-out branch would have fetched this list from a remote .ini file;
  // it is dead code. The list actually used is hardcoded below.
  var inidata = "[Setting]\r1=webmail.ktoa.or.kr\r2=muplus.co.kr\r3=mailplug.com\r4=custhelp.com\r5=116.125.29.54\r6=meetings.webex.com";

  var urllist = parseINIString(inidata);
  var objURL = Object.values(urllist);
  var arrURL = Object.values(objURL[0]); // ["webmail.ktoa.or.kr", "muplus.co.kr", "mailplug.com", "custhelp.com", "116.125.29.54", "meetings.webex.com"]

  compareresult = false;
  for (var index = 0; index < arrURL.length; ++index) {
    // Substring match anywhere in the URL, not an exact hostname comparison.
    if (currentURL.includes(arrURL[index])) {
      compareresult = true;
    }
  }
}