🛡️ PhishPal

🧩 Updated Backend Integration

Here's how PhishPal now communicates with the Railway backend:

// New backend API integration
async function checkUrlWithBackend(url) {
  try {
    const response = await fetch('https://phishpal-backend-production.up.railway.app/api/check-url', {
      method: 'POST',
      headers: { 'Content-Type': 'application/json' },
      body: JSON.stringify({ url })
    });

    if (!response.ok) {
      throw new Error(`Backend error: ${response.status}`);
    }

    const data = await response.json();
    return data.stats;
  } catch (error) {
    console.error('Backend failed:', error);
    return { 
      harmless: 0, 
      malicious: 0, 
      suspicious: 1, 
      undetected: 0 
    };
  }
}

// Message handling for content script communication
chrome.runtime.onMessage.addListener((request, sender, sendResponse) => {
  if (request.action === "scanLink" && request.link) {
    checkUrlWithBackend(request.link)
      .then(stats => sendResponse({ stats }))
      .catch(error => {
        console.error("Scan error:", error);
        sendResponse({ 
          error: error.message,
          stats: { harmless: 0, malicious: 0, suspicious: 1, undetected: 0 }
        });
      });
    return true;
  }
});

⚙️ Updated Technical Implementation

Enhanced Manifest V3 Architecture:

{
  "manifest_version": 3,
  "name": "Phishing Hover Detector",
  "version": "1.1",
  "permissions": ["scripting", "tabs", "storage"],
  "host_permissions": [
    "<all_urls>",
    "https://phishpal-backend-production.up.railway.app/*"
  ],
  "background": {
    "service_worker": "background.js"
  },
  "content_scripts": [{
    "matches": ["<all_urls>"],
    "js": ["content.js"]
  }],
  "icons": {
    "48": "icon48.png"
  }
}

Key Improvements:

• Railway Backend: Secure Express.js server handling all API communications
• No API Key Required: Users don't need to manage VirusTotal API keys
• Enhanced Security: API credentials safely stored on backend server
• Better Performance: Server-side caching and rate limiting
• Improved Reliability: Centralized error handling and fallback mechanisms