Save Post Photos As Pdfzi

Name: Security Analysis: Save Post Photos As Pdfzi
Item: Save Post Photos As Pdfzi
Rating: 5
Author: ChromeBoard

🔍 Security Report Available

👥 955 users

📦 v0.6.4

💾 699KiB

📅 2022-01-28

View on Chrome Web Store

Chrome will indicate if you already have this installed.

Overview

Features
- Drag and drop to order the photos
- Rotate
- Add the caption and the link of the post
- Save as PDF or ZIP

You can download only the photos that have "Download" button enabled.

Please note THIS IS NOT an official extension and IT IS NOT provided by Facebook.

Privacy Practices

✓ Not being sold to third parties, outside of the approved use cases

✓ Not being used or transferred for purposes that are unrelated to the item's core functionality

✓ Not being used or transferred to determine creditworthiness or for lending purposes

v0.6.4 Info Scanned Mar 3, 2026

Security Analysis — Save Post Photos As Pdfzi

Analyzed v0.6.4 · Mar 3, 2026 · 1 JS files · 1743 KB scanned

Code Patterns Detected

External Connections

www.w3.org vuejs.org tools.ietf.org www.facebook.com github.com sizzlejs.com jquery.com jquery.org js.foundation purl.eligrey.com stuk.github.io static.xx.fbcdn.net

Package Contents 6 files · 1.8MB

▾📁_metadata2KB

{}verified_contents.json2KB

▾📁assets53KB

🖼icon128.png21KB

🖼icon16.png15KB

🖼icon48.png17KB

▾📁build1.7MB

📜content.js1.7MBlarge

{}manifest.json662B

What This Extension Does

The Save Post Photos as PDF/ZIP extension allows users to save Facebook post photos with high quality as a PDF or ZIP file. It provides features like drag-and-drop ordering, rotation, and caption addition. However, it's not an official Facebook extension and has some concerning code behavior.

Permissions Explained

noneexpected: This extension does not request any permissions from the user.
Technical: No Chrome APIs or data access is involved.

Your Data

The extension accesses Facebook post photos and sends them to the user's device as a PDF or ZIP file. It also contacts various external domains for JavaScript libraries and other resources.

Technical Details

domains

www.w3.org
vuejs.org
tools.ietf.org
www.facebook.com
github.com
sizzlejs.com
jquery.com
jquery.org
js.foundation
purl.eligrey.com
stuk.github.io
static.xx.fbcdn.net

protocols

HTTP
HTTPS

encryption_status

Mixed (some HTTPS, some HTTP)

data_types

cookies
tokens

Code Findings

Function constructor used — dynamic code executionHigh

This extension uses a function constructor to execute JavaScript dynamically, which can be a security risk if not properly sanitized.

Technical: The extension uses the eval() function to execute user-supplied input as JavaScript. This can lead to code injection attacks and unauthorized access to sensitive data.

💡 Legitimate extensions may use dynamic code execution for features like content scripting or plugin loading, but it requires proper sanitization and validation.

Bottom Line

The Save Post Photos as PDF/ZIP extension has some concerning code behavior, including the use of a function constructor to execute JavaScript dynamically. While it does not request any permissions, its data exposure is limited to Facebook post photos and external domains for resource loading. Users should exercise caution when installing this extension and ensure they understand its functionality and potential risks.