> Giving random extensions downloaded from the internet access to the URLs of every request ever made by the browser is a pretty insane security hole. The obse

> Giving random extensions downloaded from the internet access to the URLs of every request ever made by the browser is a pretty insane security hole. The observer APIs will still be enabled in V3 and extensions will still be able to access that list. There is a valid case to be made that we should rethink the extension security model, but the V3 manifest doesn't address of any of its biggest problems. It's gimping the parts that enable you to block requests, but extensions will still be able to other spy on you the same way they already can today. This is very clearly not about security.