2 ms·
The one issue there is with developers that sell out their extensions to shady people. While I love the XUL era way more than this current trash, the security m
by tomc1985 6y ago
The one issue there is with developers that sell out their extensions to shady people. While I love the XUL era way more than this current trash, the security model with XUL would have done nothing to limit the blast radius and the update system would potentially install it silently
That said there used to be a human review system in place for extensions. I'm not sure if they do that any more
- badsectoracula 6y agoThat is an issue with the current system too, sure an extension isn't able to look at arbitrary files in your system, but it still is able to look at your bank site, passwords, etc and can still do a ton of damage. Web extensions aren't safe by default, you shouldn't trust them any more than any arbitrary EXE file.