稳定信号未识别到付费功能高风险权限组合

Trellix Endpoint Security Web Control

Web Control

用户数4M当前公开安装规模

评分2.0商店平均评分

评论数537公开评论体量

Manifest 版本V3插件平台版本

7日增长0近 7 天净增用户

7日增长率0%相对周增长速度

视觉预览

Trellix Endpoint Security Web Control 媒体预览

1 项素材

趋势

用户增长趋势

按已采集快照查看用户数变化。

用户增长趋势

评分趋势

近 7 日评分趋势

展示最近 7 日窗口内已采集的评分快照，辅助判断近期评分是否稳定。

7 日评分变化

起始值

2.05

日/周/月增长表现

同口径展示 1 天、7 天、30 天的绝对增长与增长率。

1日增长持平

00%

7日增长持平

00%

30日增长减少

-1M-20%

技术摘要

版本、语言与抓取信息

查看发布时间、版本、支持语言、最近更新和抓取时间。

版本10.7.0.5779

ManifestV3

大小509KiB

语言数26Deutsch / English / Nederlands +23

发布时间--

插件简介

查看插件说明、主要功能和适用场景。

This extension is intended for use with Trellix Endpoint Security Web Control software to provide color-coded URL safety ratings and blocking of malicious web-page navigation and suspicious file downloads. The extension is able to be used with all currently supported versions of Trellix Endpoint Security Web Control, which must be installed in order for the extension to function.

评价

同类与相关插件

查看 Chrome 商店详情页中的相关产品。

Trellix Endpoint Security For Mac Web Control

工作流程与规划 / Workflow & Planning

Trellix Endpoint Security For Mac Web Control

McAfee® Web Boost

工作流程与规划 / Workflow & Planning

Stop videos from auto-playing and slowing down your web-browsing

Download Virus Scanner

工作流程与规划 / Workflow & Planning

Auto scan all the download files against well-known anti-viruses using VirusTotal API.

Avira Browser Safety

工作流程与规划 / Workflow & Planning

免费增值置信度 64

Your surfing made private and secure

Sophos Chrome Security

工作流程与规划 / Workflow & Planning

免费增值置信度 64

This is the Sophos Mobile client for Chrome devices.

Microsoft Defender Browser Protection

工作流程与规划 / Workflow & Planning

Protect yourself against online threats, like phishing and malicious websites, with real-time protection from Microsoft.

AI 产品解读

Enterprise web browsing security control — provides color-coded URL safety ratings and blocks malicious page navigation and suspicious file downloads as part of Trellix Endpoint Security

Protects enterprise users from phishing sites, malicious downloads, and dangerous web content by integrating browser-level controls with the locally installed Trellix Endpoint Security platform

User browses web → extension content scripts (mcafee_wa_coreengine.js, mcafee_wa_contentplg.js) injected on all pages evaluate URLs → background script (mcafee_wa_bkground.js) communicates via native messaging with locally installed Trellix Endpoint Security software (siteadvisor.mcafee.chrome.extension) → software returns safety ratings → extension sets color-coded toolbar icon and blocks/warns on dangerous pages → user sees safety status and blocked navigation if needed

目标用户: Enterprise employees whose organizations deploy Trellix Endpoint Security Web Control / IT-managed environments requiring centralized web security controls

The 'upgrade' and 'subscription' strings are legacy McAfee SiteAdvisor localization entries; cannot fully confirm if any are actively referenced in the UI without exhaustive runtime tracing, but no functional billing/payment code exists in source.
The cookie syncing behavior (doubleclick.net, zeotap.com at lines 1156-1188 of bkground.js) is notable but orthogonal to the login/paid analysis.
The extension's full behavior depends on the native host application (Trellix Endpoint Security Web Control) which is not included in the extension package.

付费分析

未识别到付费功能

The extension itself contains no payment processing, feature gating, or subscription management code. The heuristic-detected 'subscription' and 'upgrade' keywords are legacy localization strings inherited from the older McAfee SiteAdvisor consumer product — e.g., 'Synchronize Subscription' (res_133), 'Upgrade to [%SITEADVISORPLUS%]' (res_125/res_140), and 'Buy Now' (res_141). These are static UI message strings, not active billing features. The extension is an enterprise component (`enterprise: true` hardcoded at mcafee_wa_bkground.js:50) of Trellix Endpoint Security, licensed at the organizational level. No Stripe, PayPal, or payment platform code exists. No upgrade prompts or feature locks were found in the functional JavaScript.

置信度: 88
支付平台: --
来源: AI / 高
需要登录: 否
登录理由: The extension requires no user login or account. All 'login' keyword hits in source code (mcafee_wa_contentplg.js lines 1299-1412) are a LoginLinter class that detects whether the *visited webpage* is a login page for phishing detection — not authentication for the extension. The 'token' references (line 28) are static URL parameters (`whitelistUrl: "about:blank?command=whitelist&token=1"`), not auth tokens. The extension communicates with a locally installed native host (`siteadvisor.mcafee.chrome.extension` at mcafee_wa_bkground.js:2647) — the Trellix Endpoint Security Web Control software — via native messaging. No OAuth flows, no login UI, no credential entry exists in the extension.

权限风险

高风险权限组合

根据声明权限和站点访问权限，评估插件的访问范围与潜在敏感度。

敏感权限：nativeMessaging
扩展能力较强：webRequest、tabs、downloads、cookies、storage
主机权限覆盖范围较宽
同时具备浏览数据与站点访问能力

发布者

Trellix

Musarubra US LLC

邮箱: [email protected]
电话: +917785889900
地址: 6000 Headquarters Dr Plano, TX 75024-5513 US

上面的公开联系方式保持可见；开发者组合页对付费账号开放。

查看开发者组合页

权限

站点访问

Trellix Endpoint Security Web Control

Trellix Endpoint Security Web Control 媒体预览

用户增长趋势

用户增长趋势

近 7 日评分趋势

7 日评分变化

日/周/月增长表现

版本、语言与抓取信息

插件简介

最新评论快照

同类与相关插件

Trellix Endpoint Security For Mac Web Control

McAfee® Web Boost

Download Virus Scanner

Avira Browser Safety

Sophos Chrome Security

Microsoft Defender Browser Protection