Extensions have a lot of power. We've written about a situation in the past where an extension actually XSS'd sites unintentionally, even if the site itself had

Extensions have a lot of power. We've written about a situation in the past where an extension actually XSS'd sites unintentionally, even if the site itself had XSS protections built-in: https://www.tinfoilsecurity.com/blog/building-a-browser-extension-be-careful-not-t-17787 https://www.tinfoilsecurity.com/blog/building-a-browser-exte...