3 ms·
I wonder if we need a non-turning complete library for chrome extensions like we have for some packet filtering libraries and bitcoin script. No regex. No loo
by burtonator 8y ago
I wonder if we need a non-turning complete library for chrome extensions like we have for some packet filtering libraries and bitcoin script.
No regex.
No loops.
Constrained list of functions.
This could go a long way towards opening up the web to more extensions but also keeping it more secure.
I recently did a rev to the Polar chrome extension:
https://chrome.google.com/webstore/detail/polar-pdf-web-and-documen/jkfdkjomocoaljglgddnmhcbolldcafd?hl=en https://chrome.google.com/webstore/detail/polar-pdf-web-and-...
and I had to request a new permission for filtering and they're now taking a WEEK to approve my any updates due to code review.
I really only need to evaluate a URL and add headers.
This doesn't need to be turing complete.
I basically just need to take a HTTP response and headers if they're missing when a specific origin is set.
- tekstar 8y agoThis is where Safari content blocking extensions are now. The extensions register a list of URLs with Safari with instructions to block.
- deleted 8y ago[deleted]
- AnaniasAnanas 8y agoWhy no regex and (bounded) loops? You don't need turing completeness for either of these. And what does Turing completeness has to do with security anyway?
- kccqzy 8y agoThe relevant API is there in Chrome though currently in beta only; see https://developers.chrome.com/extensions/declarativeNetRequest https://developers.chrome.com/extensions/declarativeNetReque...