4 ms·
I think the privacy argument is that extensions cannot steal cookies. The current model grants extensions permission to steal cookie values right? I am unfamil
by ffpip 6y ago
I think the privacy argument is that extensions cannot steal cookies. The current model grants extensions permission to steal cookie values right?
I am unfamiliar, so please feel free to correct me. Thanks for uBO!
- gorhill 6y agoYou can observe `Cookie` header with a webRequest.onHeadersReceived listener. Documentation about what can be observed or not is all available online, there is no need to make any assumption: Firefox: https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/WebExtensions/API/webRequest/onHeadersReceived https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/Web... Chromium: https://developer.chrome.com/docs/extensions/reference/webRequest/#life-cycle-of-requests https://developer.chrome.com/docs/extensions/reference/webRe... That should answer all questions regarding what can be observed.
- ffpip 6y agoThanks for the links. I should read up on that. So the privacy argument is false.