proxy-sock5-manager 作者： Pradeepkumar Halakeri

Purpose: This is a legitimate enterprise proxy management extension. It allows users to switch browser traffic between pre-configured SOCKS5 proxy profiles, with per-site domain routing rules. It is designed for enterprise environments where users need to reach internal services through approved proxy connections.

Permissions justification:

• proxy — Core functionality. The extension uses browser.proxy.onRequest to make per-request routing decisions (proxy or direct) based on hostname matching against user-configured domain rules.
• storage — Persists proxy profiles and settings across browser restarts using browser.storage.local.
• <all_urls> — Required because the proxy.onRequest handler must evaluate ALL requests to determine whether each one matches a domain rule (e.g., proxy *.internal.company.com, direct for everything else). Without this, the handler would only fire for specific URL patterns, defeating the per-site routing feature.

Permissions NOT used:

• webRequest / webRequestBlocking — NOT needed. browser.proxy.onRequest operates independently of the webRequest API.
• tabs / activeTab — Extension does not access tab content.

Security design:

• Passwords are stored in browser.storage.local (plaintext — WebExtension API limitation). The UI prominently warns users about this. Passwords are stripped from state sent to the popup, only fetched on-demand during editing, never logged, redacted on export, and cleared from DOM when the editor closes.
• No data is sent to external servers. No telemetry. No analytics.
• The extension never silently routes traffic — the status badge always shows whether proxy is active.
• No auto-activation — user must explicitly click "Apply."
• No auto-fallback to direct on proxy failure — user remains informed of connection issues.

No build step: All source is plain JavaScript, HTML, and CSS. What you see in the zip is the complete, unminified source. No bundler, no transpiler, no external dependencies.

innerHTML: The code uses DOM API methods (createElement, textContent, appendChild) for all dynamic content rendering. No innerHTML assignments with dynamic data.

data_collection_permissions: Set to ["none"] — this extension does not collect, transmit, or access any user data, telemetry, or Firefox health information.