Foxit Pdf Creator
🔍 Security Report Available View on Chrome Web StoreChrome will indicate if you already have this installed.
Overview
This plugin is used to convert the webpages to PDF. Users can set the layout, add watermarks, headers/footers, and apply security settings for the PDF during conversion. Foxit PDF Editor is required to use this plugin. For more information, go to www.foxit.com.
Tags
Privacy Practices
Security Analysis — Foxit Pdf Creator
Permissions
Code Patterns Detected
Package Contents 39 files · 94KB
What This Extension Does
The Foxit Pdf Creator extension allows users to convert web pages into PDF documents with customizable settings. It's designed for productivity and workflow purposes, but its functionality raises some concerns regarding data exposure and potential risks.
Permissions Explained
- contextMenusexpected: This permission lets the extension add custom menu items to your browser's context menu.
Technical: The extension uses this API to create context menu items, which can be used for legitimate purposes like providing quick access to conversion options. However, it also increases the attack surface if compromised. - tabsexpected: This permission allows the extension to access and manipulate your browser tabs.
Technical: The extension uses this API to access and interact with your open tabs, which is necessary for its functionality. However, it also grants access to sensitive information like tab URLs and content. - nativeMessagingcheck this: This permission enables the extension to communicate with native applications on your system.
Technical: The extension uses this API for native messaging, which is a high-risk permission. If compromised, it could lead to unauthorized access and data exposure. ⚠ 1 - cookiescheck this: This permission allows the extension to read and write cookies on your browser.
Technical: The extension uses this API to access cookies, which can be used for tracking or other malicious purposes. This is a high-risk permission due to its potential for data exposure. ⚠ 1
Your Data
The extension accesses your browser's cookies and has the potential to expose sensitive information like tab URLs and content. It also communicates with native applications on your system, which is a high-risk activity.
Technical Details
Code Findings
This means the extension can read and write cookies on your browser, which could be used for tracking or other malicious purposes.
Technical: The extension uses the cookies API to access cookies from http://*/*, https://*/*, file:///*. This increases the risk of data exposure if compromised.
💡 Legitimate extensions may use this permission for legitimate purposes like storing user preferences or session information.
This means the extension adds custom menu items to your browser's context menu, which can be used for quick access to conversion options.
Technical: The extension uses the contextMenus API to create context menu items. This is a common pattern in legitimate extensions and does not raise significant concerns.
💡 Legitimate extensions often use this permission to provide users with quick access to features or settings.
This means the extension uses a messaging system to communicate between different domains, which is a common practice in web development.
Technical: The extension uses postMessage for cross-origin communication. This is a standard technique used by many legitimate extensions and does not raise significant concerns.
💡 Legitimate extensions often use this permission to communicate with other domains or services.
The Foxit Pdf Creator extension has some concerning permissions, including nativeMessaging and cookies. While it provides a useful feature for converting web pages into PDF documents, its potential risks outweigh its benefits. Users should exercise caution when installing this extension.
