Is Ziflow - Review and Approval safe?
Ziflow lets any web page request a screenshot of the visible tab and strip frame and CSP headers.
The extension's content script, injected on all pages, answers a page-level message by capturing a PNG of the visible tab and posting it back, once the page creates a marker element. The same marker also makes the background script remove X-Frame-Options and Content-Security-Policy headers from that tab's responses and optionally rewrite cookies to SameSite=None. No origin check limits these requests to Ziflow's own pages.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 1.8.4. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on every site you visit
<all_urls>
Watch every request your browser makes
webRequest
Watch, block and rewrite every request your browser makes
webRequestBlocking
Act on the current tab, but only after you click the extension
activeTab
See every page you navigate to, as you navigate to it
webNavigation