Integrate secretlint into DevTools.

Latest Version

Version

1.3.4

Update

August 23, 2021

Size

664KiB

Developer

secretlint Extension

Secretlint detect credentials that are included in your request/response.

Usage

1. Open browser's Developer Tools
2. ✅ Disable Cache
3. Reload page and secretlint report found credentials in your request/response.

Supported secrets

- API tokens: GitHub/Slack/SendGrid/AWS/GCP etc.
- Private keys
- IP Address
- Plain Authorization header

Source Code

- https://github.com/secretlint/webextension

Source Manifest.json

{"update_url": "https://clients2.google.com/service/update2/crx", "name": "__MSG_appName__", "description": "__MSG_appDescription__", "version": "1.3.4", "short_name": "__MSG_appShortName__", "manifest_version": 2, "default_locale": "en", "icons": { "32": "images/icon-32.png", "96": "images/icon-96.png", "192": "images/icon-192.png" }, "background": { "scripts": [ "scripts/background.js" ] }, "content_scripts": [ { "js": [ "scripts/contentScript.js" ], "matches": [ "" ], "run_at": "document_start" } ], "devtools_page": "pages/dev_tools.html", "browser_action": { "default_icon": { "32": "images/icon-32.png", "96": "images/icon-96.png", "192": "images/icon-192.png" }, "default_title": "__MSG_browserActionTitle__", "default_popup": "pages/settings.html" }, "options_ui": { "page": "pages/settings.html" }, "permissions": [ "", "webNavigation", "storage" ], "content_security_policy": "script-src 'self' 'unsafe-eval'; object-src 'self';"}

Download CRX(664KiB)