Ncapture Chrome extension icon

Ncapture

🔍 Security Report Available
👥 400K+ users
📦 v1.1.315.0
💾 749KiB
📅 2024-11-27
View on Chrome Web Store

Chrome will indicate if you already have this installed.

Capture web pages, online PDFs, Facebook posts, Twitter tweets, and YouTube videos with NCapture, a free browser extension that imports content into NVivo for qualitative research analysis. Researchers and analysts benefit most from this tool, which streamlines data collection and organization. With NCapture, you can quickly capture and import relevant content to enhance your research projects.

Overview

From qsrinternational.com

NCapture is a free web-browser extension that allows you to quickly and easily capture content like web pages, online PDFs, Twitter tweets, and Facebook posts for import into:
• The latest release of NVivo – Windows and NVivo – Mac* (released in March 2020)
• NVivo 12 for Windows (Pro and Plus) and NVivo 12 for Mac*
• NVivo 11 for Windows (Pro and Plus) and NVivo 11 Mac*
• NVivo 10 for Windows and NVivo 10.1 (and onwards) for Mac**
*YouTube videos or comments can’t be imported as datasets, these need to be captured as PDFs.
** NVivo 10.1 (and onwards) for Mac doesn’t support Facebook or Twitter content captured as datasets, these can be captured as PDFs instead.
NCapture allows you to capture:
• Web pages and online PDFs
• Facebook wall posts and comments
• Tweets from Twitter including particular words, phrases or hashtags, or Tweets by a particular user
• YouTube videos and comments
Learn more about NCapture
More information about NCapture can be found in NVivo Help under below urls:

NVivo - Windows: https://help-nv.qsrinternational.com/20/win/Content/ncapture/ncapture.htm
NVivo - Mac: https://help-nv.qsrinternational.com/20/mac/Content/ncapture/ncapture.htm

About NVivo

NVivo helps qualitative and mixed methods researchers unlock insights in their data with powerful analysis. NVivo provides a place to organize, store and analyze data, allowing researchers to ask complex questions of data to identify themes and draw clear conclusions.
Find out more about NVivo, or download a free 14 day trial, at www.nvivobyqsr.com.

Tags

Productivity/workflow productivity/workflow

Privacy Practices

Not being sold to third parties, outside of the approved use cases
Not being used or transferred for purposes that are unrelated to the item's core functionality
Not being used or transferred to determine creditworthiness or for lending purposes
v1.1.315.0 Info Scanned Mar 7, 2026

Security Analysis — Ncapture

Analyzed v1.1.315.0 · Mar 7, 2026 · 13 JS files · 984 KB scanned

Permissions

tabs notifications storage scripting offscreen downloads https://*/*

Code Patterns Detected

innerHTML assignment — potential XSS vector String.fromCharCode (obfuscation) charCodeAt (obfuscation) unescape (deprecated obfuscation) Makes XHR requests Uses Fetch API Creates script elements dynamically Shows notifications Uses postMessage for cross-origin comms Sets up event listeners

External Connections

www.facebook.com www.linkedin.com lab.arc90.com api.x.com qsrinternational.com code.google.com typekit.com ncaptureservice.qsrinternational.com ws.geonames.net api.twitter.com x.com graph.facebook.com +8 more

Package Contents 77 files · 2MB

📁_metadata12KB
{}verified_contents.json12KB
📁icons715KB
🖼Fail.png4KB
🖼Failed-48.png7KB
🖼Help.png4KB
🖼Memo.ico92KB
🖼Stopped.png4KB
🖼ajax-loader-green-32.gif3KB
🖼ajax-loader-green-48.gif4KB
🖼ajax-loader-orange-32.gif3KB
🖼ajax-loader_large_indicator.gif4KB
🖼complete-48.png6KB
🖼complete.png4KB
🖼dataset.png17KB
🖼facebook.png21KB
🖼linkedin-icon.png19KB
🖼ncapture-128.png12KB
🖼ncapture-16.png804B
🖼ncapture-19.png972B
🖼ncapture-48.png3KB
🖼pdf.png10KB
🖼retweet-as-dataset.ico290KB
🖼twitter-48.png49KB
🖼video.ico66KB
🖼video_with_comments.ico66KB
🖼web.png17KB
🖼webpage-32.png2KB
🖼youtube.jpg6KB
📁js991KB
📁content-scripts102KB
📁document1KB
📜document-content-script.js1KB
📁facebook4KB
📜facebook-content-script.js3KB
📜facebook-private-page-script.js846B
📁linkedin
📜linkedin-content-script.js309B
📁twitter
📜twitter-content-script.js350B
📁web-page97KB
📜page-update-content-script.js487B
📜readability.js78KBlarge
📜web-page-content-script.js18KB
📜desktop-notification-page.js94KBlarge
📄desktop-notification-page.js.LICENSE.txt471B
📜notifications-page.js100KBlarge
📄notifications-page.js.LICENSE.txt471B
📜offscreen.js321B
📜popup-page.js555KBlarge
📄popup-page.js.LICENSE.txt7KB
📜service-worker.js132KBlarge
📁style259KB
📁bootstrap138KB
📁css116KB
🎨bootstrap-responsive.css15KB
🎨bootstrap.css102KB
📁img22KB
🖼glyphicons-halflings-white.png9KB
🖼glyphicons-halflings.png14KB
📁jqueryui119KB
📁ui-lightness119KB
📁images65KB
🖼ui-bg_diagonals-thick_18_b81900_40x40.png476B
🖼ui-bg_diagonals-thick_20_666666_40x40.png384B
🖼ui-bg_flat_10_000000_40x100.png178B
🖼ui-bg_glass_100_f6f6f6_1x400.png324B
🖼ui-bg_glass_100_fdf5ce_1x400.png406B
🖼ui-bg_glass_65_ffffff_1x400.png265B
🖼ui-bg_gloss-wave_35_f6a828_500x100.png6KB
🖼ui-bg_highlight-soft_100_eeeeee_1x100.png342B
🖼ui-bg_highlight-soft_75_ffe45c_1x100.png386B
🖼ui-icons_222222_256x240.png7KB
🖼ui-icons_228ef1_256x240.png5KB
🖼ui-icons_444444_256x240.png7KB
🖼ui-icons_555555_256x240.png7KB
🖼ui-icons_777620_256x240.png4KB
🖼ui-icons_777777_256x240.png7KB
🖼ui-icons_cc0000_256x240.png4KB
🖼ui-icons_ef8c08_256x240.png5KB
🖼ui-icons_ffd27a_256x240.png5KB
🖼ui-icons_ffffff_256x240.png6KB
🎨jquery-ui-1.12.1.custom.css36KB
🎨theme.css18KB
🎨eula-dialog.css267B
🎨jquery.tagit.css1KB
🌐background.html346B
🌐desktop-notification.html2KB
🌐eula.html33KB
{}manifest.json1KB
🌐notifications.html2KB
🌐offscreen.html180B
🌐popup.html6KB

What This Extension Does

NCapture for NVivo is a browser extension that allows users to capture content from web pages, social media platforms, and online PDFs for import into NVivo qualitative research software. It's designed for researchers who need to organize, store, and analyze data. With over 400,000 users, it's a popular productivity tool.

Permissions Explained

  • tabsexpected: This permission lets the extension access your open tabs in Chrome.
    Technical: The extension uses the chrome.tabs API to interact with your browser's tab management system. This allows it to capture content from specific tabs and inject scripts into them.
  • notificationsexpected: This permission lets the extension display notifications in your browser.
    Technical: The extension uses the chrome.notifications API to show notifications when it captures content or encounters errors. This allows it to alert users about successful imports or potential issues with their data.
  • storageexpected: This permission lets the extension store data locally on your device.
    Technical: The extension uses the chrome.storage API to store captured content, user preferences, and other settings. This allows it to persist data between sessions and provide a seamless experience for users.
  • scriptingexpected: This permission lets the extension run scripts in your browser.
    Technical: The extension uses the chrome.scripting API to inject scripts into web pages and capture content. This allows it to interact with web pages programmatically and extract relevant data.
  • offscreenexpected: This permission lets the extension access your browser's off-screen rendering capabilities.
    Technical: The extension uses the chrome.offScreen API to capture content from web pages without displaying them. This allows it to extract data from background tabs and reduce the load on your system resources.
  • downloadsexpected: This permission lets the extension download files from the internet.
    Technical: The extension uses the chrome.downloads API to download captured content, such as PDFs or images. This allows it to provide users with a convenient way to save their data for later analysis.
  • https://*/*expected: This permission lets the extension access all HTTPS websites and resources.
    Technical: The extension uses this permission to make XHR requests to various domains, including social media platforms, online services, and content delivery networks. This allows it to capture content from a wide range of sources and provide users with a comprehensive research experience. ⚠ 1

Your Data

NCapture captures content from web pages, social media platforms, and online PDFs. It sends this data to the NCapture service for processing and storage. The extension also stores user preferences and settings locally on your device.

Technical Details

The extension makes XHR requests to various domains, including https://www.facebook.com, https://api.twitter.com, and https://graph.facebook.com. It uses the Fetch API to make requests to these domains and extracts data from their responses. The captured content is then sent to the NCapture service for processing and storage.

Code Findings

innerHTML assignmentMedium

This finding indicates that the extension uses innerHTML assignments, which can be a potential XSS vector if not properly sanitized.

Technical: The extension uses innerHTML assignments in its content script to inject HTML elements into web pages. This can lead to XSS attacks if an attacker injects malicious code into the page.

💡 This pattern is commonly used in legitimate extensions to inject HTML elements into web pages for rendering and styling purposes.

String.fromCharCode obfuscationMedium

This finding indicates that the extension uses String.fromCharCode to obfuscate its code. This can make it harder to analyze and debug the extension's behavior.

Technical: The extension uses String.fromCharCode to encode its code, making it difficult to read and understand. This can lead to issues with debugging and analysis of the extension's behavior.

💡 This pattern is commonly used in legitimate extensions to obfuscate their code for security or performance reasons.

Creates script elements dynamicallyHigh

This finding indicates that the extension creates script elements dynamically, which can be a potential security risk if not properly sanitized.

Technical: The extension uses document.createElement to create script elements dynamically. This can lead to XSS attacks if an attacker injects malicious code into the page.

💡 This pattern is commonly used in legitimate extensions to inject scripts into web pages for rendering and styling purposes.

Makes XHR requestsInfo

This finding indicates that the extension makes XHR requests to various domains, including social media platforms and online services.

Technical: The extension uses the Fetch API to make XHR requests to various domains. This allows it to capture content from a wide range of sources and provide users with a comprehensive research experience.

💡 This pattern is commonly used in legitimate extensions to fetch data from external sources for rendering and styling purposes.

Bottom Line

NCapture for NVivo is a powerful productivity tool that captures content from web pages, social media platforms, and online PDFs. While it has some security concerns related to XSS vectors and dynamic script creation, these can be mitigated with proper sanitization and coding practices. Users should exercise caution when installing extensions with broad permissions and regularly review their extension settings to ensure they align with their needs.

Do more in Google Chrome with Adobe Acrobat PDF tools. View, fill, comment, sign, and try convert and compress tools.
Productivity/workflow
Block ads on YouTube and your favorite sites for free
Productivity/workflow
Remove ads on YouTube and everywhere else you browse.
Productivity/workflow