Is WAWF safe?

Question

Is WAWF safe?

Accepted Answer

WAWF is high risk. When you use WA WorkFlow on WhatsApp or WAWF pages, page scripts can ask the extension for its cached Google OAuth token through the postMessage bridge. The extension can return a Google token tied to Contacts, userinfo, Calendar, and Calendar Events scopes, with Google userinfo listed as the endpoint.

Is WA WorkFlow safe?

Findings