Crosspilot
🔍 Security Report Available View on Chrome Web StoreChrome will indicate if you already have this installed.
Blocks ads and trackers from Opera extensions in a safe sandboxed environment, allowing you to install popular Opera add-ons directly in Chrome without compromising your browsing security or data. Lets you enjoy the best features of Opera's browser ecosystem within the Chrome browser, ideal for users who value the unique functionality of Opera extensions but prefer the Chrome interface. Brings the benefits of Opera's ad-blocking and tracker-removal capabilities to Chrome users who want a more secure browsing experience.
Overview
With focus on performance, privacy and security, CrossPilot is an advanced tool that makes it easy for you to install Opera webstore addons in Chrome and vice versa.
How to use
- Visit Opera addons webstore and find your desired addon.
- Click on Install with CrossPilot button in sidebar.
- Installation process will begin in CrossPilot installation page
- Review the optional permissions (Grant/Deny)
- You are ready to use your Opera addon in Chrome.
CrossPilot requires minimum permissions possible to operate. All optional permissions can be granted or denied by the user. See the following section on use of permissions for more details.
Use of permissions:
CrossPilot requires 3 permissions upon install:
1. Storage - (Used to store CrossPilot settings)
2. Unlimited Storage - (Chrome Extension storage is limited to 5MB, We require higher storage for larger extensions)
3. Alarms - (Used to create repeating tasks, mainly used for checking updates)
Optional permissions:
1. http://*/ and https://*/ (Used to for installed extensions' content scripts)
2. Downloads, downloads.open (Create and read downloads, open downloaded files, for download managers)
3. tabs (Can be used for screenshot extensions, PDF generators)
Data Privacy Policy
We do not track any of your data, period.
We do not track any usage of the extension - that includes searches, filters, tabs, windows, popup opens, etc
We do not track any websites, website usage, etc
We do not transfer any data to any 3rd party servers
The extension uses Google Analytics to collect installation metrics and code error information anonymously to improve extension quality.
The only data that we store is your storage data. You save this data to your local browser storage. We never touch or see this data. This data is exclusively stored inside your browser.
The same goes for your settings - your settings are saved solely inside your browser.
Feel free to contact us if you got any questions or concerns about data privacy, we will be happy to help.
Tags
Privacy Practices
Security Analysis — Crosspilot
Permissions
Code Patterns Detected
External Connections
Package Contents 30 files · 1.4MB
What This Extension Does
CrossPilot allows users to install Opera extensions in Chrome, providing a sandboxed environment for seamless integration. This extension solves the problem of compatibility issues between browsers, making it ideal for users who want to use Opera extensions on Chrome. With over 400,000 users, CrossPilot is a popular choice among browser enthusiasts.
Permissions Explained
- alarmsexpected: Allows the extension to schedule tasks and reminders.
Technical: Provides access to the Alarms API, enabling the extension to create repeating tasks and check for updates. This permission allows the extension to run on all websites, potentially exposing users to unauthorized script execution. - storageexpected: Allows the extension to store data locally on your device.
Technical: Provides access to the Storage API, enabling the extension to store settings and other data. This permission allows the extension to read and write data to the browser's storage, potentially exposing sensitive information if compromised. - unlimitedStorageexpected: Allows the extension to store large amounts of data locally on your device.
Technical: Provides access to the Storage API, enabling the extension to store larger extensions and their associated data. This permission allows the extension to read and write data to the browser's storage, potentially exposing sensitive information if compromised. - offscreenexpected: Allows the extension to run in the background even when you're not actively using it.
Technical: Provides access to the Offscreen API, enabling the extension to continue running tasks and checking for updates even when the browser is closed. This permission allows the extension to run on all websites, potentially exposing users to unauthorized script execution. - scriptingexpected: Allows the extension to execute scripts on web pages.
Technical: Provides access to the Content Script API, enabling the extension to inject scripts into web pages. This permission allows the extension to modify or block network requests, potentially exposing users to unauthorized script execution. - sidePanelexpected: Allows the extension to display a panel on the browser's sidebar.
Technical: Provides access to the Side Panel API, enabling the extension to create and manage panels. This permission allows the extension to interact with web pages, potentially exposing users to unauthorized script execution. - declarativeNetRequestWithHostAccessexpected: Allows the extension to block or modify network requests.
Technical: Provides access to the Declarative Net Request API, enabling the extension to create and manage rules for blocking or modifying network requests. This permission allows the extension to interact with web pages, potentially exposing users to unauthorized script execution. - tabsexpected: Allows the extension to access and manipulate browser tabs.
Technical: Provides access to the Tabs API, enabling the extension to create and manage tabs. This permission allows the extension to interact with web pages, potentially exposing users to unauthorized script execution. - downloadsexpected: Allows the extension to access and manipulate browser downloads.
Technical: Provides access to the Downloads API, enabling the extension to create and manage downloads. This permission allows the extension to interact with web pages, potentially exposing users to unauthorized script execution.
Your Data
CrossPilot accesses storage data locally on your device and sends installation metrics and code error information anonymously to Google Analytics. The extension does not collect any usage data, website usage, or transfer any data to third-party servers.
Technical Details
Code Findings
The extension uses obfuscation techniques to make its code harder to read and understand.
Technical: The extension uses String.fromCharCode() and charCodeAt() to encode strings, making it difficult to identify the actual code being executed. This is a common technique used in legitimate extensions to protect their intellectual property.
💡 1
The extension creates script elements dynamically, which can potentially expose users to unauthorized script execution.
Technical: The extension uses document.createElement('script') to create new script elements and append them to the DOM. This allows the extension to inject scripts into web pages without explicit user consent.
The extension has broad host permissions, which can potentially expose users to unauthorized script execution on all websites.
Technical: The extension declares the '*' wildcard in its manifest file, granting it permission to access and modify web pages on any domain. This is a high-risk permission that should be used with caution.
The extension may contain hardcoded secrets, which can potentially expose users to unauthorized script execution.
Technical: The extension uses a hardcoded secret in its code, which is not explicitly stated in the manifest file. This could be used as an entry point for attackers to inject malicious scripts into web pages.
CrossPilot is a legitimate extension that provides a useful feature for users who want to install Opera extensions in Chrome. However, the extension's use of broad host permissions and potential hardcoded secrets raises concerns about its security posture. Users should exercise caution when installing this extension and regularly review its permissions and behavior to ensure it remains secure.
