There is! In extension's manifest.json you can mention for which URLs your extension needs permission. This extension is asking for "http://*/*", "https://*/*". Which is all of them.