24 ms·
Anyone who takes security/privacy seriously shouldn't install any Chrome extension under any circumstances. Many extensions secretly do terrible things that tak
by stevenh 9y ago
Anyone who takes security/privacy seriously shouldn't install any Chrome extension under any circumstances. Many extensions secretly do terrible things that take months or years for anyone to uncover, or the extension is simply sold to a new owner who slips in a malicious payload which is automatically distributed to all users of the extension.
I find it strange how everyone used to be concerned about XSS exploits (including Google themselves who painstakingly implemented reflective XSS prevention, nonce support, and support for XSS-blocking HTTP headers in Chrome) and now they all love XSS as long as it has decent marketing and a clean presentation as an "extension".