1

Does anyone know if there are any security (or other) concerns related to this Chrome plugin?

Link:   Salesforce Hotkeys (BETA)

My manager is interested in implementing it, but we both want to do due diligence to make sure they're not capturing keywtrokes (passwords, data, et al). Otherwise, for some users, it would be a great utility (especially those who are keyboard-fans / anti-mouse).

The creator has a longstanding Twitter account and looks legitimate to me, plus the version control listing on the plugin's page as well.

Thanks!

Improve this question
1
  • 1
    You might also ask on Security.SE, they're more likely to take a deeper dive into looking for red flags (security-wise).
    – sfdcfox ♦
    Commented Jan 19, 2017 at 18:09

1 Answer 1

Reset to default
1

Have a look at CRX Viewer on the Chrome Web Store. It lets you view the source of extensions.

All Chrome Extensions undergo a security review before publishing. This process is known as ‘Enhanced Item Validation’ (EIV), and is a series of rigorous checks that examines a plugin’s code and its behavior when installed, in order to identify malware. Read more about it here.

However, if you're not sure about the security of an extension, it's best not to use it, especially when sensitive data is at stake. It's important to weigh the pros/cons in situations like this.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .