3 ms·
Couldn't CSP be used to limit which paths were valid URLs? There could also be hierarchies of extension permissions, because they don't all need to be able to
by angry_octet 6y ago
Couldn't CSP be used to limit which paths were valid URLs?
There could also be hierarchies of extension permissions, because they don't all need to be able to do everything.
- gruez 6y agoextensions can also remove/add CSPs I think, either through modifying the header or modifying the DOM.
- angry_octet 6y agoYes, but you could strictly limit which extensions had that permission, make it a site specific permission, etc. Auto disabling an extension that changes to require that permission would be a start.