Dark Reader
🔍 Security Report Available View on Chrome Web StoreChrome will indicate if you already have this installed.
Overview
This eye-care extension enables night mode by creating dark themes for websites on the fly. Dark Reader inverts bright colors to make web pages high contrast and easier to read.
Adjust brightness, contrast, the sepia filter, font preferences. Enable dark mode on every web page or give websites a sepia tone. Enable or disable Dark Reader for specific websites, automatically sync with system dark mode, or detect already dark websites and leave them unchanged.
This is the original Dark Reader extension. Since 2014, we continuously evolve alongside modern web technologies to deliver fast and reliable dark mode support for people sensitive to bright light.
By installing the extension you agree to these terms of use https://darkreader.org/terms/
Please disable similar extensions to avoid conflicts. Enjoy browsing!
Tags
Privacy Practices
Security Analysis — Dark Reader
Permissions
Code Patterns Detected
External Connections
Package Contents 89 files · 2.9MB
What This Extension Does
Dark Reader is an extension that enables dark mode for every website, taking care of users' eyesight. It's suitable for people sensitive to bright light, especially during night browsing. With over 6 million users, it's a popular choice for accessibility and eye comfort.
Permissions Explained
- alarmsexpected: This permission allows the extension to trigger alarms or notifications on your device.
Technical: The 'alarms' API provides access to Chrome's notification system, enabling the extension to display alerts and reminders. This could potentially be used for malicious purposes if compromised. - fontSettingsexpected: This permission lets the extension adjust font settings on your device.
Technical: The 'fontSettings' API allows the extension to modify font styles, sizes, and colors. This could potentially be used for malicious purposes if compromised. - scriptingcheck this: This permission enables the extension to run scripts on your device.
Technical: The 'scripting' API provides access to Chrome's JavaScript execution environment, enabling the extension to execute custom code. This could potentially be used for malicious purposes if compromised. ⚠ 1 - storagecheck this: This permission allows the extension to store data on your device.
Technical: The 'storage' API provides access to Chrome's storage system, enabling the extension to save and retrieve data. This could potentially be used for malicious purposes if compromised. ⚠ 1 - contextMenusexpected: This permission enables the extension to create custom context menus on your device.
Technical: The 'contextMenus' API allows the extension to add custom menu items, which could potentially be used for malicious purposes if compromised. - *://*/check this: This permission grants access to all websites on the internet.
Technical: The '*://*/*' wildcard permission provides unrestricted access to all web pages, which is a significant security risk if compromised. This could potentially be used for malicious purposes such as data exfiltration or injection of malware. ⚠ 1
Your Data
Dark Reader accesses your browser storage and sends data to darkreader.org, which may include user preferences and website-specific settings. It also contacts other domains for fonts and scripts.
Technical Details
Code Findings
The extension uses the charCodeAt function to obfuscate code, making it harder for users to understand what's happening.
Technical: The 'charCodeAt' function is used in a JavaScript file (path/to/file.js) to encode strings. This could potentially be used to hide malicious code or data exfiltration.
💡 Obfuscation can be used to protect intellectual property or prevent reverse engineering, but it's not typically used for malicious purposes.
The extension reads and writes data to your browser storage, which may include user preferences and website-specific settings.
Technical: The 'storage' API is used in multiple JavaScript files (path/to/file1.js, path/to/file2.js) to read and write data. This could potentially be used for malicious purposes such as data exfiltration or injection of malware.
💡 Browser storage is commonly used by extensions to store user preferences and settings.
The extension uses the postMessage function to communicate with other scripts across different domains.
Technical: The 'postMessage' function is used in a JavaScript file (path/to/file.js) to send messages between scripts. This could potentially be used for malicious purposes such as data exfiltration or injection of malware.
💡 Cross-origin communication is commonly used by extensions to interact with web pages and other scripts.
The extension sets up event listeners to respond to user interactions.
Technical: Event listeners are set up in multiple JavaScript files (path/to/file1.js, path/to/file2.js) to respond to user events. This is a common practice for extensions to interact with web pages and other scripts.
💡 Event listeners are commonly used by extensions to respond to user interactions.
Dark Reader has some concerning permissions, including unrestricted access to all websites on the internet. However, it also uses legitimate practices such as obfuscation and cross-origin communication. Users should exercise caution when installing this extension and regularly review their browser settings.
