4 ms·

Being a FF user I can't use it, but it made me think about the dangers of extensions being hijacked. It would be nice to have as a browser builtin feature a dom

Being a FF user I can't use it, but it made me think about the dangers of extensions being hijacked. It would be nice to have as a browser builtin feature a domain based whitelist that enables access to extensions according to a trust level, so that for example any new encountered domain can be accessed by all extensions by default, but if I assign say my bank domain a level of N, only extensions whose trust level exceed that N number would be able to access its data while others would be bypassed, then a fixed maximum value of say 10 would mean all extension bypassed for the paranoid. Probably even a trusted/not tusted flag would suffice, but just in case one wants to differentiate between locally written and installed extensions that can't self update, then official and non official ones. Doable?

namibj 7y ago
Consider filing an enhancement request: https://bugzilla.mozilla.org/enter_bug.cgi?product=DevTools https://bugzilla.mozilla.org/enter_bug.cgi?product=DevTools You'd not want to simplify it too much in it's core, though. That'd exclude advanced configurations outright.
gnicholas 7y ago
One way to accomplish this is to just use private windows for your banking or other critical sites, and then don't let extensions run in private windows. You can configure this per extension in Firefox and Chrome.
- deleted 6y ago
  [deleted]
- throwaway_pdp09 6y ago
  A simpler, if perhaps unnecessarily heavyweight way of doing this is to have separate accounts on the same computer. My email has its own account, and allows cookies there (it's gmail). I have to switch accounts to do mail but that's not so bothersome, perhaps even an advantage for some as it might help not jumping every time a mail arrives. Using private X in the browser requires trusting the browser, this way you can have the OS isolate processes which has to be stronger.
- lazyeye 6y ago
  Why not have two different browsers installed. One for banking etc and the other for everyday use with all the plugins installed.
dumpHero2 6y ago
I use Edge (the latest version) for my banking related work. The experience is same as chrome, and I don't have any browser extensions installed there.

namibj 7y ago

Consider filing an enhancement request: https://bugzilla.mozilla.org/enter_bug.cgi?product=DevTools https://bugzilla.mozilla.org/enter_bug.cgi?product=DevTools You'd not want to simplify it too much in it's core, though. That'd exclude advanced configurations outright.

gnicholas 7y ago

One way to accomplish this is to just use private windows for your banking or other critical sites, and then don't let extensions run in private windows. You can configure this per extension in Firefox and Chrome.

deleted 6y ago
[deleted]
throwaway_pdp09 6y ago
A simpler, if perhaps unnecessarily heavyweight way of doing this is to have separate accounts on the same computer. My email has its own account, and allows cookies there (it's gmail). I have to switch accounts to do mail but that's not so bothersome, perhaps even an advantage for some as it might help not jumping every time a mail arrives. Using private X in the browser requires trusting the browser, this way you can have the OS isolate processes which has to be stronger.
lazyeye 6y ago
Why not have two different browsers installed. One for banking etc and the other for everyday use with all the plugins installed.

dumpHero2 6y ago

I use Edge (the latest version) for my banking related work. The experience is same as chrome, and I don't have any browser extensions installed there.