Chrome Web Store Verified

Browser Redirection Extension

by [email protected] · 1.0M users · 3.4 rating
65e21168-41d5-553b-9f25-16e4ea71c23e | v26.05.14.1820
66/ 100
HIGH risk
No change since v25.11.7
Risk verdict
Review before use

Score-based assessment (high risk, 66/100). No analyst review available.

Analysis record

Analysed
6 days ago
Version
v26.05.14.1820
Artifact
SHA256 B4C…C2D
Source
Findings (non-IoC)

Evidence ledger

Ranked by severity · findings with a source location link to the code viewer

58 detail rows

YARA Rule Matches

7 rules
SeverityRuleHitsFilesMetadata
LOWLocalStorageShouldNotBeUsed 1
HdxVideoBootstrapper.js
-
LOWpostinstall crypto operations 3
CitrixBcrServiceWorker.js_metadata/verified_contents.jsonVDIWebView.js
-
LOWpostinstall system command 11
VDIWebView.jserror.svgHdxBcrGeometryNotifier.js +8 more
-
LOWpostinstall file manipulation 9
HdxBcrGeometryNotifier.jsHdxBcr.jsCitrixBcrApi.js +6 more
-
LOWpostinstall obfuscation 6
HdxVideoBootstrapper.jsCitrixBcrServiceWorker.jsVDIWebView.js +3 more
-
LOWpostinstall network communication 15
HdxBcrGeometryNotifier.jsCitrixVideoSuppressor.jsextension.crx +12 more
-
LOWpostinstall file download 3
CitrixBcrServiceWorker.jsVDIWebView.jsHdxBcr.js
-

Network Indicators

Concrete URLs, domains, IPs, emails, and hashes extracted from the analyzed artifact.

28 total
...

Network indicators are queued for lazy loading

Scroll this section into view to load the detailed rows.

Publisher Evidence

Limited evidence

[email protected]

Publisher identity, store signals, distribution reach, and warning signals used for context. Treat this as supporting evidence, not a clean bill of health.

Chrome does not expose the same publisher verification data as IDE stores, so this score is deliberately conservative.

62
Noisy-finding weight
x1.00
Publisher domain
cloud.com
Observed
Store verification signal
Limited signal
Limited
Extension portfolio
8
Portfolio

11 evidence rows available.

Finding Categories

8
Network
28
IoC Indicators

YARA Rules Matched

7 rules(48 hits)
LocalStorageShouldNotBeUsed postinstall crypto operations postinstall system command postinstall file manipulation postinstall obfuscation postinstall network communication postinstall file download

Requested Permissions

14 permissions
nativeMessaging

Exchange messages with programs outside the browser

Dangerous
http://*/*
Dangerous
https://*/*
Dangerous
webRequest

Intercept, modify, and block all network requests

High
cookies

Read and modify cookies on all sites

High
activeTab
Medium
tabs
Medium
bookmarks
Medium
sessions
Medium
declarativeNetRequest
Low
webNavigation
Low
storage
Low
system.display
Low
alarms
Low

Security Analysis Summary

Security Analysis Overview

Browser Redirection Extension is a Chrome Web Store extension published by [email protected]. Version 26.05.14.1820 has been analyzed by the Risky Plugins security platform, receiving a risk score of 65.88/100 (HIGH risk) based on 86 security findings.

Risk Assessment

This extension presents high security risk. Significant concerns were identified during analysis. It is not recommended for use in sensitive or production environments without thorough review.

Findings Breakdown

  • Medium: 38 finding(s)
  • Low: 48 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Browser Redirection Extension is published by [email protected] on the Chrome Web Store marketplace. The extension has approximately 1.0M users.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

Chrome version history

Risk trend by version

3 analyzed versions. Each point is the latest successful scan for that version; failed zero-score scans are hidden. Dates are based on first seen by risky plugins.

Selected
66
Change since first
No change
Change from previous
No change
Versions:
First analyzed version
25.11.5
Jan 21, 2026
Risk range
66 to 66
Across analyzed versions
Latest analyzed version
26.05.14.1820
Jun 27, 2026
Selected version
high
Version
v26.05.14.1820
2 months ago
Risk score
66
Findings
86
Change vs previous
0

Pick any point on the chart to explore that version's code below.

About This Extension

Citrix Browser Redirection Extension Overview Enhance your web browsing experience within Citrix Virtual Apps and Desktops (CVAD) sessions. The Browser Redirection Extension creates a smoother workflow between your local browsing and virtual sessions. This extension offers two main features: Browser Content Redirection: Browser Content Redirection offloads resource-intensive web pages to the user's local device, boosting performance and enhancing the user experience. This means smoother browsing and reduced strain on your servers, all while maintaining a secure virtual environment. Bidirectional Content Redirection: Bidirectional Content Redirection intelligently routes web traffic between your virtual environment and local devices for the best possible experience. This means internal sites can leverage local resources like printers and scanners, while external sites benefit from the security and control of the virtual environment, all while providing users with a seamless browsing experience. Why Choose Citrix Browser Content Redirection or Bidirectional Content Redirection? These technologies intelligently manage web traffic, delivering a superior experience for your users while reducing strain on your infrastructure. Here's how they can benefit your organization: Cost Savings: Offload resource-intensive web pages to user devices, freeing up valuable server resources and reducing bandwidth consumption. This translates to lower hardware and network costs. Enhanced User Experience: Provide your users with a smoother, more responsive browsing experience, even with graphics-intensive websites. Deliver native-like performance, eliminating lag and improving productivity. Improved Security: Maintain a secure environment while allowing access to both internal and external resources. Bidirectional content redirection enables local devices to interact with internal sites while benefiting from the security of your virtual environment. Increased Flexibility: Support a wide range of use cases, from basic web browsing to complex web applications that require local resource access. Easily manage redirection settings with granular policy controls in Citrix Web Studio System Requirements Server side components Citrix Virtual Apps and Desktops * Long Term Service Release * Minimum requirements - Any non end-of-life LTSR Citrix Virtual Apps and Desktops release * Recommended - Citrix Virtual Apps and Desktops 2402 or above * Current Release Minimum requirement - Any non end-of-life CR Citrix Virtual Apps and Desktops release Recommended - Latest Citrix Virtual Apps and Desktops release Browser Components * Browsers - Microsoft Edge - Google Chrome * Browser redirection extension: Published in both Chrome and Edge web stores * We recommend using the latest version of the browsers for best experience Client side components Windows * Windows 10 or 11 * Citrix Workspace App ** Minimum Requirement - Any non end-of-life Citrix Workspace App ** Recommended - Long Term Service Release - Citrix Workspace App 2402 latest CU - Current Release - Citrix Workspace App 2405 or above Note: * Browser content redirection is not supported on Citrix Workspace App LTSR releases 1912 and 2203.1 * Client side browser engine needed for Browser content redirection is installed by default on Current Releases * Client side browser engine needed for Browser content redirection is not installed by default on Citrix Workspace App 2402 LTSR release Linux * Citrix Workspace App ** Minimum requirement - Any non end-of-life Citrix Workspace App ** Recommended - Citrix Workspace App 2411 or above ChromeOS * Citrix Workspace App ** Latest version from Chrome Web Store MacOS (Public Preview) * macOS 11 Big Sur * macOS 12 Monterey * macOS 13 Ventura * macOS 14 Sonoma (up to 14.2.1) * Citrix Workspace App ** Minimum Requirement - Citrix Workspace app 2409 or above Product documentation * Citrix Virtual Apps and Desktops ** https://docs.citrix.com/en-us/citrix-virtual-apps-desktops/multimedia/browser-content- redirection.html * Citrix Workspace App for Windows. ** https://docs.citrix.com/en-us/citrix-workspace-app-for-windows/browser-content- redirection.html * Citrix Workspace App for Mac ** https://docs.citrix.com/en-us/citrix-workspace-app-for-mac/ear.html#support-for-browser- content-redirection-technical-preview ** Client side component for Mac - https://www.citrix.com/downloads/workspace- app/browser-content-redirection-mac/bcr-files.html * Citrix Workspace App for Linux ** https://docs.citrix.com/en-us/citrix-workspace-app-for-linux/browser-content- redirection.html * Citrix Workspace App for ChromeOS ** https://docs.citrix.com/en-us/citrix-workspace-app-for-chrome/about#browser-content- redirection Extension Change Log ========================== What's new in version 26.05 * Redirection stability: reload-page issues, detached overlay, clipping/sizing after reload, long idle session drops * Browser Profile sharing feature improvement * SSO/auth: Redirect after SSO, profile-sharing URL handling What's new in version 25.11.5 * Added Single Sign-On (SSO) support for seamless login * Enhanced clipping for better accuracy and performance What's new in version 25.07.1 * Verify that the client platform and versions support BCR, Adaptive BCR, and Browser Profile Sharing before enabling their respective functionalities. * Disable Adaptive BCR by default; this BETA feature can be manually enabled on the VDA. * Added support for high-DPI displays. * Improved support for URLs with complex query strings. What's new in version 25.3.4 * Enhanced UI for recoverable user actions * Tech preview : Support for single sign on (Browser Profile Sharing) What's new in version 6.7 * Changes to support high DPI multimonitor What’s new in version 6.5 * Updated to the latest Chrome extension technology (manifest v3). * Better control over which websites open on your local computer (requires Citrix Virtual Apps and Desktops version 2209 or newer). * Improved security to avoid false alarms. * Fixed a problem with YouTube videos not playing correctly on Macs. * Fixed an issue with how webpages are displayed when moved to your local computer. Note: Do not install Beta alongside your current version of Browser Redirection Extension.

Frequently Asked Questions