поиск яндексa
🔍 Security Report Available View on Chrome Web StoreChrome will indicate if you already have this installed.
Overview
Расширение делает Яндекс поиском по умолчанию в браузере.
Установите расширение — и получите быстрый доступ к основным сервисам Яндекса. Поиск, светофор пробок, прогноз погоды, почта и Алиса будут всегда под рукой.
Расширение не занимает место на вашем компьютере и работает, не замедляя работу устройства.
Яндекс отличает запросы от адресов сайтов и предугадывает по первым буквам, что вы хотите найти.
Чтобы открыть нужный сайт, не обязательно вводить точный адрес — достаточно набрать, например, [википедия] или даже [dbrb]. Поиск поймёт вас с полуслова.
Это расширение совместимо с Manifest V3 и строго соответствует всем правилам и условиям обслуживания интернет-магазина Chrome.
Устанавливая программу, вы принимаете условия Лицензионного соглашения http://legal.yandex.ru/desktop_software_agreement/
Tags
Privacy Practices
Security Analysis — поиск яндексa
Permissions
Code Patterns Detected
External Connections
Package Contents 11 files · 30KB
What This Extension Does
The поиск яндексa extension makes Yandex search the default in your browser, providing quick access to various services like search, traffic light, weather forecast, email, and Alisa. It's designed for users who want a convenient way to use these services without having to navigate to their respective websites. However, it requires some permissions that may raise concerns about data exposure and security.
Permissions Explained
- alarmsexpected: This permission allows the extension to display notifications or alerts in your browser.
Technical: The extension uses this permission to display notifications, but it's not clear what specific triggers or conditions are used for these notifications. This could potentially be used for phishing or social engineering attacks if exploited. - cookiescheck this: This permission allows the extension to read and write cookies in your browser, which can store sensitive information like login credentials or personal preferences.
Technical: The extension accesses browser cookies, which could potentially be used for tracking or phishing attacks if compromised. The scope of this permission is quite broad, as it applies to all domains, not just Yandex's own services. ⚠ 1 - storageexpected: This permission allows the extension to store data locally on your device, which can be used for caching or other purposes.
Technical: The extension uses this permission to store data locally, but it's not clear what specific types of data are stored or how they're protected. This could potentially be used for storing sensitive information if exploited. - tabsexpected: This permission allows the extension to access and manipulate tabs in your browser, which can be used for various purposes like tab grouping or auto-completion.
Technical: The extension uses this permission to access tabs, but it's not clear what specific actions are taken with this permission. This could potentially be used for phishing or social engineering attacks if exploited. - *://chrome-elements.yandex.addons/expected: This permission allows the extension to access a specific domain related to Yandex's Chrome extensions platform.
Technical: The scope of this permission is quite narrow, as it only applies to a single domain. However, it could potentially be used for tracking or phishing attacks if compromised. - *://*.yandex.by/, *://*.yandex.com/, *://*.yandex.com.tr/, *://*.yandex.kz/, *://*.yandex.net/, *://*.yandex.ru/, *://*.yandex.ua/, *://*.yandex.uz/, *://*.ya.ru/check this: This permission allows the extension to access various domains related to Yandex's services.
Technical: The scope of this permission is quite broad, as it applies to multiple domains across different regions. This could potentially be used for tracking or phishing attacks if compromised. ⚠ 1
Your Data
The extension accesses browser cookies and stores data locally on your device, which can store sensitive information like login credentials or personal preferences. It also sends data to various domains related to Yandex's services.
Technical Details
Code Findings
The extension uses the Fetch API to make HTTP requests, which is a common practice for web development.
Technical: The extension uses the fetch function from the window object to make requests. This is a standard way of making HTTP requests in modern browsers.
💡 This pattern commonly exists in legitimate extensions that need to make API calls or load data from external sources.
The extension accesses browser cookies, which can store sensitive information like login credentials or personal preferences. This could potentially be used for tracking or phishing attacks if compromised.
Technical: The extension uses the chrome.cookies API to access and modify cookies. The scope of this permission is quite broad, as it applies to all domains, not just Yandex's own services.
💡 This pattern commonly exists in legitimate extensions that need to store or retrieve data from cookies.
The extension sets up event listeners, which can be used for various purposes like auto-completion or tab grouping.
Technical: The extension uses the addEventListener function to set up event listeners. This is a standard way of handling events in modern browsers.
💡 This pattern commonly exists in legitimate extensions that need to respond to user interactions or changes in the browser state.
The поиск яндексa extension provides convenient access to Yandex's services, but its permissions and behavior raise some concerns about data exposure and security. Users should be cautious when granting permissions and regularly review their extensions' behavior to ensure they align with their expectations.
