Is XY HTTP Relay safe?

XY HTTP Relay lets any visited page send page-controlled HTTP requests through its background fetch handler.

The content script runs on all websites and listens for a page-dispatched triggerHTTPEvent event. When triggered, it reads the request URL, method, headers, and body from localStorage, asks the background worker to fetch that request, and returns the response text back to the page.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.