Is WebStudio safe?

Question

Is WebStudio safe?

Accepted Answer

WebStudio is high risk. Our dynamic analysis captured GET requests to stream.redcoolmedia.net each time a new page was loaded. The full address of every page you visit is hex-encoded and sent to the extension's server alongside a stable per-install tracking ID. This applies to every HTTP and HTTPS site you navigate to, with the sole exception of redcoolmedia.net itself. The extension's Chrome Web Store description presents it as an HTML editor and does not disclose this browsing-history transmission. When the extension is first run, it generates a 10-character random identifier and stores it in both chrome.storage.local and chrome.storage.sync. Because chrome.storage.sync is tied to your Google account, the same ID follows you across every device where you are signed in to Chrome. Our dynamic analysis confirmed this identifier was present in all captured outbound requests to redcoolmedia.net as the 'u=' parameter. The extension's Chrome Web Store description presents it as an HTML editor and does not disclose this cross-device tracking identifier.

Is HTML editor WebStudio for Webpages safe?

Findings