Is VLR+ safe?
VLR+ fetches HTML from the public paste host snippet.host and inserts it into vlr.gg pages.
VLR+ adds features to the vlr.gg Valorant site. Its content script downloads markup from snippet.host and inserts it into the page with jQuery without sanitizing it, so whoever controls those snippets can change what runs on vlr.gg pages. An opt-in link preview feature also sends hovered forum link URLs to api.microlink.io.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed VLR+ contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- api.microlink.io
VLR+ sends data to api.microlink.io. One other extension we have analysed sends data here.
- snippet.host
VLR+ sends data to snippet.host. No other extension we have analysed sends data here.