Confucius Secure Viewer

Confucius Secure Viewer helps authorized users access protected Confucius documents through the Confucius document viewer. Sign in with your issued credentials, then open a protected document to view it. The extension supports the viewer’s secure access workflow and helps prevent unauthorized requests to protected document content. Use is limited to the Confucius Secure Viewer service. This extension does not provide document access by itself; your organization must provide an account and access to protected documents. **Key Features** - Session-aware secure tiles: adds authenticated headers to tile/image requests required by the Secure Viewer service. - Keyboard safeguards: blocks Print Screen and intercepts keyboard input that could compromise content; shows a lock overlay until refresh. - Screen capture protections: disables getDisplayMedia, flags recording indicators, and surfaces capture warnings. - DevTools monitoring: detects open/close events and can end the secure session when tools are opened. - Anti-tamper and integrity checks: verifies bundled resource integrity and flags suspicious page activity. - Controlled network surface: blocks cross-origin requests unrelated to the active origin during secure viewing. **How It Works** - A lightweight content script injects a guard and UI wrapper on allowed sites at document start. - When you sign in via the extension popup, the background worker retrieves a device token from your Secure Viewer backend. - The guard intercepts PDF tile requests and applies authentication headers; rendered tiles are displayed in a secure overlay panel. - Suspicious actions (e.g., eval, window.open, cross-origin fetch) are blocked and reported to the extension runtime. **Permissions and Justification** - storage: persists session state (user ID, device token, expiry) locally in the browser. - scripting: injects the guard script and styles only on allowed domains. - tabs / activeTab: derives the site origin for server routing and broadcasts session updates to open tabs. - webRequest / webRequestBlocking: coordinates request handling needed for secure tile delivery on supported sites. **Privacy & Data** - No advertising or analytics; no sale of data. - Stores session details (user ID, device token, session ID, expiry) locally using chrome.storage. - Communicates only with the current allowed origin (e.g., https://drm.2ooly.com) to authenticate and fetch tiles. - Does not capture or transmit keystrokes beyond enforcing security policies on allowed sites.