3 ms·
As long as the extension UI is rendered where the page can also render something, it will be vulnerable to phishing. E.g. https://www.seancassidy.me/lostpass.ht
by def_true_false 9y ago
As long as the extension UI is rendered where the page can also render something, it will be vulnerable to phishing. E.g. https://www.seancassidy.me/lostpass.html https://www.seancassidy.me/lostpass.html
- kuschku 9y agoCorrect, that’s why it’d be preferable to have it handled in the browser itself. If it’s a message in the browser chrome itself, and not as <div> in the page, it is possible to add distinguishing UI. With the current system, it’s literally impossible to distinguish the UI
- def_true_false 9y agoChrome has extension popups that kind of do this - they are pointed to the icon in the extension bar. Does Firefox have anything like that?
- kuschku 9y agoYes, Firefox has the same – but they’re obviously not optimal in the context of a page.