Is Font Changer safe?

// Replaces (or appends) the Agoda "cid" affiliate parameter with the// extension's own hardcoded ID (window._ea.aid.AGODA === "1763404")function rewriteAgodaLink(existingCidMatch, originalUrl) {  const extensionAgodaId = window._ea?.aid?.AGODA || ""; // "1763404"  if (existingCidMatch) {    return originalUrl.replace(existingCidMatch[0], `cid=${extensionAgodaId}`);  }  return `${originalUrl}${originalUrl.includes("?") ? "&" : "?"}cid=${extensionAgodaId}`;}

// Replaces (or appends) the Banggood "p" affiliate token with the// extension's own hardcoded value (window._ea.aid.BANGGOOD === "7W24238151091201612I")function rewriteBanggoodLink(existingTokenMatch, originalUrl) {  const extensionBanggoodToken = window._ea?.aid?.BANGGOOD || "";  if (existingTokenMatch) {    return originalUrl.replace(existingTokenMatch[0], `p=${extensionBanggoodToken}`);  }  return `${originalUrl}${originalUrl.includes("?") ? "&" : "?"}p=${extensionBanggoodToken}`;}

// Replaces (or appends) the Booking.com "aid" affiliate parameter.// getBookingAffiliateId() reads a browser-specific hardcoded ID:// default "2082838", Firefox "2085046", Edge "2344472".function rewriteBookingLink(existingAidMatch, originalUrl) {  const aidParam = `aid=${getBookingAffiliateId()}`;  if (existingAidMatch) return originalUrl.replace(existingAidMatch[0], aidParam);  if (/(\/searchresults\.(.+)\.html)|(\/index\.(.+)\.html)/.test(originalUrl)) {    const [path, query] = originalUrl.split("?");    return `${path}?${aidParam}&${query}`;  }  return `${originalUrl}${originalUrl.endsWith(".html") ? "?" : ";"}${aidParam}`;}

// Runs once immediately, then again on every DOM mutation (via a// MutationObserver wired up by J()). Walks every <a href> on the page// not already processed and rewrites it in place.function rewriteLinksForSite(site) {  if (!site) return;  const extractProductOrCid = siteExtractors[site]; // one of Y/z/Q/tt  if (!extractProductOrCid) return;  const pendingAliExpressIds = [];  (async () => {    const links = document.querySelectorAll('[href]:not(.ea-processed, link)');    if (links.length === 0) return;    links.forEach(anchor => {      let href = anchor.getAttribute('href') || '';      if (href === '#' || href.startsWith('javascript:')) {        anchor.classList.add('ea-processed');        return;      }      const match = extractProductOrCid(href);      if (match) {        if (site === 'agoda') { applyRewrite(/cid=\d+/, m => rewriteAgodaLink(m, href)); return; }        if (site === 'banggood') { applyRewrite(/p=\w+/, m => rewriteBanggoodLink(m, href)); return; }        if (site === 'booking') { applyRewrite(/aid=\d+/, m => rewriteBookingLink(m, href)); return; }        // AliExpress: queue the product ID for a batched deals99.com lookup        if (!pendingAliExpressIds.includes(match)) pendingAliExpressIds.push(match);        anchor.classList.add('ea-promotion');        anchor.setAttribute('data-ea-pid', match);      } else {        anchor.classList.add('ea-processed');      }    });    // Fetch replacement promotion URLs for every queued AliExpress product ID    const promotionUrls = await fetchPromotionUrls(site, pendingAliExpressIds);    document.querySelectorAll('[href].ea-promotion:not(.ea-processed, link)').forEach(anchor => {      const pid = anchor.getAttribute('data-ea-pid');      if (pid) {        const url = promotionUrls[pid];        if (url != null && url.startsWith('http')) anchor.setAttribute('href', url);      }      anchor.classList.add('ea-processed');    });  })();}

// Called once per page with the site name ("aliexpress") and the list// of AliExpress product IDs found by the link scanner. Caches results// for 1 hour, batches in groups of 10, and asks the background worker// to fetch https://deals99.com/jsonp/product/kanai-urls for each batch.async function fetchAliExpressPromotionUrls(site, productIds) {  const trackingId = window._ea?.aid?.AE || ""; // "ea_medium_14" (browser-specific)  const cacheKey = `promotion_urls:${site}`;  const now = Date.now();  let cached = cache.get(cacheKey) || {};  cached = keepUnexpired(cached, now);  const uncachedIds = productIds.filter(id => !(id in cached));  if (uncachedIds.length) {    const { hostname } = window.location;    const expiresAt = now + 60 * 60 * 1000; // 1 hour    for (const batch of chunk(uncachedIds, 10)) {      const response = await backgroundApiRequest('/product/kanai-urls', {        site,        hostname,        source_ids: batch.join(','),        account: '2',        tracking_id: trackingId,      });      for (const [productId, promoUrl] of Object.entries(response.records)) {        cached[productId] = `${promoUrl}:EA:${expiresAt}`;      }    }    cache.set(cacheKey, cached);  }  return stripExpiryMarker(cached);}

// The content script cannot fetch cross-origin from the page context in// this build, so it sends a runtime message and the background service// worker (which has host permissions for <all_urls>) makes the request.async function handleApiMessage(request, sendResponse) {  let { url } = request;  const { data, method } = request;  if (method === 'GET' && data && Object.keys(data).length > 0) {    url = `${url}?${new URLSearchParams(data)}`;  }  try {    const res = await fetch(url, {      method,      body: ['GET', 'HEAD'].includes(method) ? undefined : JSON.stringify(data),    });    if (!res.ok) throw new Error(res.statusText);    sendResponse({ type: 'success', content: await res.json() });  } catch (err) {    sendResponse({ type: 'fail', content: err });  }}browser.runtime.onMessage.addListener((request, sender, sendResponse) => {  if (request.action === 'api') handleApiMessage(request, sendResponse);  return true; // keep the message channel open for the async response});