Google Input Tools
🔍 Security Report Available View on Chrome Web StoreChrome will indicate if you already have this installed.
Overview
By installing this extension, you agree to the Terms of Service at http://www.google.com/intl/en/policies/terms/.
Switch to typing in a different language with the click of the mouse, and switch back just as easily. The Google Input Tools extension provides virtual keyboards for over 90 languages, full IMEs or direct transliteration for over 30 different scripts, and handwriting input for over 40 languages.
What's New?
✓ Malayalam now prioritize Arabic numerals as the default output when typing numbers. This change makes it easier to input numbers, as Malayalam numerals are not commonly used.
Usage Instructions:
When you first install the extension, click on the extension icon, then select "Extension Options" in the pop-up menu. A new tab will appear where you can select your preferred languages or input methods. The keyboards, IMEs or handwriting input you add to 'Selected input tools' can be enabled at any time from the extension itself. You can always return to this options page to add, remove, or change the order of your input tools.
input tool, simply click on the extension icon, select the desired language tool in the pop-up menu, then click on any text box on the web page. To turn off an input tool, click on the extension icon and select the "Turn Off" option.
To use transliteration, type languages phonetically in English letters, and they'll appear in their correct alphabet. Keep in mind that transliteration is different from translation; the sound of the words is converted from one alphabet to the other, not the meaning. For example, to get in नमस्ते with Hindi transliteration, type in n-a-m-a-s-t-e. You will get a list of Hindi words sound like namaste. Then, press SPACE to select the first suggestion नमस्ते.
Latin IMEs are to help people type in Latin-script languages using the US keyboard. Features include automatic diacritics, spell correction, and prefix completion. To use Latin IMEs, type unaccented letters, and they will be corrected to a desired word. For example, type "franca" in French IME, "français" appears, and it can be committed by pressing TAB. If continuously typing "francais", "français" will be committed by
pressing SPACE. To get all the candidates for "francais", press BACKSPACE.
To use handwriting input, select the handwriting input of your desired language. Press trackpad or left click of mouse to hand draw a character on the pop-up handwriting panel. Select the character from the suggestion list, or simply press ENTER or SPACE key to select the first suggestion.
Need help? Find a problem? Point your browser here for support:
https://chrome.google.com/webstore/support/mclkkofklkfljcocdinagocijmpgbhab
Keyboard Shortcuts:
✓ ALT+SHIFT+N - Switch to next input tool in the list (if the extension is off, turn it on; if the current input tool is the last tool in the list, turn the extension off)
✓ ALT+SHIFT+R - Revert to the last input tool used (if none, turn off the extension)
✓ ALT+SHIFT+T Toggle the current input tool.
✓ SHIFT - Toggle between En/Cn state (Chinese input tools only)
✓ SHIFT+SPACE - Toggle the SBC/DBC mode (Chinese input tools only)
✓ CTRL+PERIOD - Toggle Chinese / European language punctuation (Chinese input tools only)
Limitations:
Due to security features of Google Chrome, the Google Input Tools extension will not assist with input in the address bar (omnibox), on the Chrome Web Store, or inside of other Chrome extensions. It does not currently assist with input inside of Flash applications.
By installing this extension, you agree to the Terms of Service at https://chrome.google.com/extensions/intl/en /gallery_tos.html
Tags
Privacy Practices
Security Analysis — Google Input Tools
Permissions
Code Patterns Detected
External Connections
Package Contents 306 files · 2.4MB
What This Extension Does
The Google Input Tools extension allows users to type in different languages, providing virtual keyboards for over 90 languages. It solves the problem of language barriers on the web and is suitable for anyone who needs to communicate in multiple languages.
Permissions Explained
- offscreenexpected: This permission allows the extension to create windows outside of the browser's main window, which can be used to display virtual keyboards or other UI elements.
Technical: Thechrome.windowsAPI is accessed, allowing the extension to create and manage windows. This could potentially be used for phishing attacks if compromised. - tabsexpected: This permission allows the extension to access and manipulate browser tabs, which is necessary for displaying virtual keyboards or other UI elements in specific tabs.
Technical: Thechrome.tabsAPI is accessed, allowing the extension to create, update, and delete tabs. This could potentially be used for tab hijacking if compromised. - storageexpected: This permission allows the extension to store data locally on the user's device, which is necessary for storing language preferences and other settings.
Technical: Thechrome.storageAPI is accessed, allowing the extension to store and retrieve data. This could potentially be used for storing sensitive data if compromised. - scriptingexpected: This permission allows the extension to execute scripts in the context of web pages, which is necessary for providing virtual keyboards and other UI elements.
Technical: Thechrome.scriptingAPI is accessed, allowing the extension to inject scripts into web pages. This could potentially be used for injecting malware if compromised. - http://*/*expected: This permission allows the extension to make HTTP requests to any domain, which is necessary for accessing language data and other resources.
Technical: Thechrome.tabsAPI is accessed with thehttp://*/*permission, allowing the extension to make cross-origin requests. This could potentially be used for phishing attacks if compromised. - https://*/*expected: This permission allows the extension to make HTTPS requests to any domain, which is necessary for accessing language data and other resources.
Technical: Thechrome.tabsAPI is accessed with thehttps://*/*permission, allowing the extension to make cross-origin requests. This could potentially be used for phishing attacks if compromised.
Your Data
The extension accesses language data and other resources from various domains, including Google's servers.
Technical Details
www.gstatic.com, ssl.gstatic.com, github.com, inputtools.google.com, drive.google.com, fonts.gstatic.com, csi.gstatic.com, eddieantonio.ca, and www.altlab.dev. The protocol used is both HTTP and HTTPS. No encryption status or data types are specified.Code Findings
The extension uses innerHTML to inject scripts into web pages, which can potentially lead to XSS attacks if compromised.
Technical: The innerHTML property is accessed in the contentScript.js file, allowing the extension to inject scripts into web pages. This could potentially be used for injecting malware if compromised.
💡 This pattern is commonly used in legitimate extensions to provide UI elements and interact with web pages.
The extension uses String.fromCharCode to obfuscate code, which can make it harder for users to understand what the extension is doing.
Technical: The String.fromCharCode function is used in the contentScript.js file to obfuscate code. This could potentially be used to hide malicious behavior if compromised.
💡 This pattern is commonly used in legitimate extensions to provide UI elements and interact with web pages.
The extension captures keystrokes, which can potentially be used for malicious purposes if compromised.
Technical: The chrome.tabs API is accessed with the http://*/* permission, allowing the extension to capture keystrokes. This could potentially be used for phishing attacks or other malicious behavior if compromised.
💡 This pattern is commonly used in legitimate extensions to provide UI elements and interact with web pages.
The Google Input Tools extension has some security concerns, including the potential for XSS attacks due to innerHTML assignment and the capture of keystrokes. However, these concerns are mitigated by the extension's legitimate use of permissions and its alignment with the stated purpose. Users should exercise caution when installing this extension.
