Google Dictionary By Goog
🔍 Security Report Available View on Chrome Web StoreChrome will indicate if you already have this installed.
Lets you view definitions easily as you browse the web with Google Dictionary By Goog, a simple and convenient extension that provides instant access to word meanings on any webpage. Ideal for students, language learners, and anyone looking to expand their vocabulary, this extension brings a wealth of knowledge at your fingertips. Suitable for users of all ages and backgrounds, it's a useful tool for anyone who wants to improve their understanding of words in context.
Overview
IMPORTANT:
- The pop-up bubble will not work in tabs that were open prior to installation. After installing this extension, either reload your open tabs or restart Chrome.
- Note that all extensions are disabled on Chrome Web Store pages (including this one). Do not test the extension on this page; it will not work!
- If the extension is not working for you, please make sure it's up to date. Visit chrome://extensions/, click the "Update extensions now" button, then restart Chrome.
----------
With this extension, you can:
1) Double-click any word to view its definition in a small pop-up bubble.
2) View the complete definition of any word or phrase using the toolbar dictionary.
3) Store a history of words you've looked up, so you can practice them later.
Foreign words are automatically translated to your language of choice.
Supported dictionaries:
- Arabic
- Brazilian Portuguese
- Chinese (Simplified)
- Chinese (Traditional)
- Czech
- Dutch
- English (UK)
- English (US)
- French
- German
- Hindi
- Italian
- Japanese
- Korean
- Russian
- Slovak
- Spanish
- Turkish
If you opt in (via the options page), this extension will store a history of all your looked-up words and their definitions. You can download this history as a CSV file at any time. In addition, you can allow other Chrome extensions to access this history. For example, a third-party extension could produce flashcards to help you practice words you've looked up before.
By installing this extension, you agree to the Terms of Service: https://www.google.com/policies/terms
Having problems with this extension? If the suggestions above didn't work, please fill out a problem report: https://chrome.google.com/webstore/support/mgijmajocgfcbeboacabfgobmjgjcoja
Tags
Privacy Practices
Security Analysis — Google Dictionary By Goog
Permissions
Code Patterns Detected
External Connections
Package Contents 23 files · 99KB
What This Extension Does
The Google Dictionary By Goog extension provides a convenient way to view definitions of words as you browse the web. It solves the problem of needing to look up unfamiliar words by allowing users to double-click on them or use the toolbar dictionary. This extension is suitable for anyone who wants to improve their vocabulary and language skills.
Permissions Explained
- storageexpected: This permission allows the extension to store data locally on your device, such as a history of words you've looked up.
Technical: The extension uses the Chrome storage API to access and modify local storage. This could potentially allow an attacker to steal or manipulate sensitive user data if the extension is compromised.
Your Data
This extension accesses various domains, including Google's servers for dictionary data and analytics. It also captures keystrokes and monitors form inputs to provide its functionality.
Technical Details
Code Findings
This finding indicates that the extension uses innerHTML assignment in its code, which could potentially allow an attacker to inject malicious scripts into the page.
Technical: The extension's content script uses innerHTML assignment to update the dictionary bubble. This could be exploited by an attacker to inject malicious scripts if they can manipulate the HTML of the bubble.
💡 innerHTML assignment is commonly used in legitimate extensions for updating dynamic content.
This finding indicates that the extension captures keystrokes, which could potentially allow an attacker to steal sensitive user data or inject malicious scripts into the page.
Technical: The extension's background service worker uses a keyboard event listener to capture keystrokes. This allows it to detect when the user is typing and update the dictionary bubble accordingly.
💡 Capturing keystrokes is necessary for the extension to provide its functionality, but it does increase the attack surface if the extension is compromised.
This finding indicates that the extension makes XHR requests to various domains, including Google's servers for dictionary data and analytics.
Technical: The extension uses the Fetch API to make XHR requests to the following domains: github.com, www.google.com, www.google-analytics.com, dictionaryextension-pa.googleapis.com, translate.google.com, issues.apache.org, support.google.com. This allows it to retrieve dictionary data and send analytics information.
💡 Making XHR requests is necessary for the extension to provide its functionality and collect usage statistics.
The Google Dictionary By Goog extension provides a convenient way to view definitions of words as you browse the web. However, it does capture keystrokes and has some potential XSS vectors due to innerHTML assignment. Users should be aware of these risks and take necessary precautions to protect their sensitive data.
