TouchEn PC보안 확장

What This Extension Does

Permissions Explained

• nativeMessaging: This permission allows the extension to communicate with native applications on the user's system. While not uncommon in certain types of extensions (e.g., those requiring direct system interaction), it is unusual for a productivity/developer-focused extension.
• *://*/*: This is an overly broad permission that grants access to all websites and protocols. It suggests the extension may be intercepting or modifying web traffic, which could be necessary for its security features but raises concerns about privacy.

• scripting: This permission allows the extension to run scripts in the context of other web pages. While common for extensions that need to interact with websites (e.g., ad blockers), it's worth noting given the extension's focus on security and potential interaction with sensitive data.

What We Found in the Code

• No red-flag code patterns detected: This is a positive finding, indicating that our automated scan did not identify any obvious security vulnerabilities or malicious coding practices.
• The use of eval for string evaluation: While eval can be a security risk if used with untrusted input, its presence alone does not indicate misuse without further context. Without more information on how it's being used, we cannot determine if this is a concern.
• The use of innerHTML: This is a common pattern in web development for dynamically rendering UI elements. It's unlikely to be a security issue unless the extension is using untrusted data to populate these elements.
• Keyboard listeners: These are often used for shortcuts or keyboard-driven functionality within an extension's UI. Without evidence that they're being used outside of this context, it's likely a normal coding pattern.

External Connections

Things to Consider

• The broad *://*/* permission may be necessary for the extension's security features but raises privacy concerns. Users should weigh this against their trust in the extension and Laon Secure.
• The use of nativeMessaging suggests the extension has significant system interaction capabilities, which could be a concern depending on how it's used.
• Given the extension's focus on security, users may want to review its permissions and functionality closely to ensure they align with their expectations.