mention-all-for-messenger icon indicating copy to clipboard operation
mention-all-for-messenger copied to clipboard

This extension is very suspicious

Open Nicofisi opened this issue 2 years ago • 0 comments

First of all you say that the extension doesn't require any permissions, yet in the manifest.json it states that it needs 7, two of which are full access to all of Facebook and all of Messenger. I won't argue, perhaps you need those permissions, but why are you hiding this fact?

Also I would expect the background.js file to be some simple file with a few KB of more or less readable code. Yet the file is some 1.55 MEGABYTE minified file with a lot of dependencies included and who knows what else could be hiding somewhere between those lines.

I trust that perhaps the project is legit and working, but in it's current state, I would highly discourage anyone to use this. Please include a readable version of the source files and don't provide false information in the README. Thank you.

Nicofisi avatar Jan 28 '22 18:01 Nicofisi