JS Vulnerability Detectorとは何ですか？

JS Vulnerability Detectorはrandysekvojtaによって開発されたChromeの拡張機能で、その主な機能は「JavaSript Vulnerability Detector is a result of my Master Thesis at Brno University of Technology, Faculty of Information…」です。

拡張機能のスクリーンショット

JS Vulnerability Detector拡張機能のCRXファイルをダウンロード

JS Vulnerability Detector拡張子のファイルをcrx形式でダウンロードし、ブラウザにChrome拡張機能を手動でインストールするか、crxファイルを友達と共有して簡単にChrome拡張機能をインストールします。

拡張機能の使用方法

JavaSript Vulnerability Detector is a result of my Master Thesis at Brno University of Technology, Faculty of Information technology, graduation year 2022. The extension aims to add security features to the end-users of various websites containing vulnerable JavaScript library code. The principle of extension is following:

1. After page loads the extension scans all the JavaScript contained on the page and sends it to background script for processing.
2. If the script contains a known vulnerability (initial version focuses mostly on jQuery), it is tracked and shown in the extension popup. After detection the vulnerable script can be blocked, patched or left as is and only tracked.

All data is stored locally and can be cleared by a "Clear" button in the extension popup. There is no server communication going on, no data leaves the browser.

Extension runs in 4 modes:
1. disabled - no action
2. analyze - standard analysis only mode - no patching or blocking of vulnerable scripts
3. bloc - vulnerable scripts are removed from website
4. repair - experimental, vulnerable scripts are patched if possible

Currently it can detect vulnerable versions of jQuery (all up to 3.5.0) and repair them by updating them in runtime to 3.5.0 and couple more (around 30, including some of lodash, remarkjs, axios, handlebars and other vulnerabilities).

Source codes are open, available at https://github.com/xrandy00/mt_2022

拡張機能の基本情報

名前	JS Vulnerability Detector
ID	bmcojnncgfmglejiinbdnahmkmbgifhk
公式URL	https://chromewebstore.google.com/detail/js-vulnerability-detector/bmcojnncgfmglejiinbdnahmkmbgifhk
説明	JavaSript Vulnerability Detector is a result of my Master Thesis at Brno University of Technology, Faculty of Information…
ファイルサイズ	459 KB
インストール数	246
現在のバージョン	1.0.0
最終更新日	2022-12-13
公開日	2022-04-19
評価	5.00/5 合計 1 レビュー
開発者	randysekvojta
Eメール	[email protected]
支払い方法	free
拡張機能のウェブサイト	https://github.com/xrandy00/mt_2022
ヘルプページのURL	https://github.com/xrandy00/mt_2022
対応言語	en
manifest.json
{ "update_url": "https:\/\/clients2.google.com\/service\/update2\/crx", "name": "__MSG_appName__", "short_name": "__MSG_appShortName__", "description": "__MSG_appDescription__", "homepage_url": "http:\/\/chrome.google.com\/webstore", "version": "1.0.0", "version_name": "1.0.0", "manifest_version": 3, "default_locale": "en", "minimum_chrome_version": "88", "action": { "default_icon": "assets\/icon.png", "default_popup": "popup.html", "default_title": "__MSG_appName__" }, "icons": { "144": "assets\/icon.png" }, "host_permissions": [ "" ], "permissions": [ "storage" ], "web_accessible_resources": [ { "resources": [ "evaluate.js", "popup.js" ], "matches": [ "" ] } ], "content_scripts": [ { "matches": [ "" ], "run_at": "document_start", "all_frames": true, "js": [ "content_script.js" ] } ], "background": { "service_worker": "background.js" } }