Edge Add-ons certification flags extension as PUA

[childsplayextensions]

Hi,

This appears to be a recurring issue across multiple Microsoft Edge Add-ons submissions. Two separate extensions (including the latest, ChartMaker Pro) have now been rejected with the same message: "The extension contains or enables malware/PUA."

Context

After my first rejection in February, I contacted support and was advised to refer to the documentation. After making several adjustments based on my interpretation of the policy and resubmitting, the same rejection persisted without additional specific feedback. I ultimately had to pause updates for that extension on Edge Add-ons.

Current extension details (ChartMaker Pro)

Product ID: b5ff1973-1005-4212-a1a4-a72e69d934d0

ChartMaker Pro only uses the following permission:

• storage (strictly for saving user settings)

There is no:

• remote code execution
• use of eval or dynamic code injection
• external script loading at runtime
• elevated or sensitive permissions

The only change in this update was replacing a remote Font Awesome CDN reference:

with a local Font Awesome asset bundle (CSS/fonts/SVG) to support full offline usage. These assets are static and do not execute any code or load external resources.

Could you please help identify what specific file, pattern, or behavior is triggering the classification so I can address it if it is a false positive?

[Rahul-Bauri]

Hi @childsplayextensions since your extension has been found in violation of Policy 1.2.2 (Unwanted and Malicious Software), we are unable to provide additional details beyond what is outlined in the policy for this type of violation.

You can review the policy details here: Developer policies for the Microsoft Edge Add-ons store | Microsoft Learn

Thank you for understanding.

[avi12]

I run into the same issue
Which resulted in getting a strike and in the meantime I decided to pause all extension updates on Microsoft Partner Center

[childsplayextensions]

Thanks for the response. Since multiple developers (including myself, across more than one extension) are seeing the same PUA rejection without specific feedback, I guess I will pause further submissions for now.

[Rahul-Bauri]

Closing this issue here, please feel free to open a new bug if you face any challenges in the future.

[avi12]

It escalated from “I will pause my extension updates until further notice" to "Not worth my headache" #573