Plugin require "Access your data for all websites", while no such permission required in fact, in addition with lack of security monitoring by Mozilla and ability to contribute by anyone in GitHub makes this plugin huge security breach. Who can guarantees that there are no hidden malware with next update? Developers, you SHOULD use minimal browser permission, to specific sites only, like Access your data for sites in the “named” domain; Access your data in # other domains; Access your data for a specific site; Access your data on # other sites Upd: Don't tell it is required because you need it, this is not true. I don't recommend install to anyone.
Access to all site data is required due to the integrations since we need it to place our timer in certain apps. Placing this timer on the correct apps, allows us to "read and change the data" on the websites we have an integration for.
Please reach out to our Support team at support@clockify.me if you have any other questions regarding this.
