3 ms·
> asking for updated ad block lists You could only allow GET requests and require the user to whitelist this the first time the extension does it. Subsequent
by aembleton 6y ago
> asking for updated ad block lists
You could only allow GET requests and require the user to whitelist this the first time the extension does it.
Subsequent calls to the same blocklist would go through without a user prompt, but if it suddenly started trying to send your email address or some other param, it would stand out.
- jcranmer 6y agoA trivial way way to get around that: Make calls to two seemingly benign requests early on. Now you can send whatever data you want to without triggering another prompt by successively requesting the first resource to indicate a '0' and the second resource to indicate a '1'.