![]() ![]() ![]() ![]() State from leon, as writing this, it was the last comment on this addon. ![]() Therefore I strongly suggest uninstalling and reporting this extension. More importantly, in the future, even if what they do now is legit, you will not be informed about any changes to their permissions, because it basically already has every permission it can get in that regard. I couldn’t figure out when they do it, yet, but it seems to be for promotional stuff. It will then send to their own server a summary of this HTTP request if some condition is met (promoteButter?).įrom this point, everything is a bit messy in their code and I will have to check a bit deeper.īottom line is: they are monitoring what sites you visit and may be sending a lot of your online activity to their own server. First of all, it monitors EVERY SINGLE HTTP request you make. This background script is located in /js/common/connectivity.js ( ). But when you click something, and it is a link, it will send the link URL to a background script. The code in this file does: Monitor when you are entering the site, where you are coming from on this site, when you are leaving the site, when you are clicking something, when you are moving your mouse (which they even failed to do properly), when you are having focus in an input, and you are pressing a key! It is not monitoring what you type. Js/common/frame.js (slightly unobsfucated: ) It even executes on your about:blank page and in all sub-frames on the currently visited site! The code executed is js/common/frame.js On every single page you visit, SIH executes code at document_start (meaning as soon as the page is opened). “From I have just analyzed the current code of Steam Inventory Helper. Uninstall this extension asap, someone else already wrote about it and I can confirm this: ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |