4 ms·

What information does the extension send back to your servers?

• sqs 10y ago
  It doesn't send code from the GitHub page to Sourcegraph; it actually only works if the repo is already mirrored on Sourcegraph (which obviously requires your explicit permission for private repos). It will send the name of the repo (e.g., "google/golang" or "JodaOrg/joda-time"), so that Sourcegraph can see whether that repo is mirrored. If the names of your repositories alone are sensitive data and you don't want to trust us, then you shouldn't use the extension. (Repo names can leak to third parties via the HTTP referer header, even in an alternate universe where this extension never existed.) The unpacked code is available at https://sourcegraph.com/sourcegraph/sourcegraph/-/tree/client/browser-ext https://sourcegraph.com/sourcegraph/sourcegraph/-/tree/clien... if you want to poke around. And you can always check the Chrome network inspector to see the exact data structures.
  • zodvik 10y ago
    Thanks! That clears it up.