4 ms·
> Browser extensions have exactly as much power as the browser itself I would say this is false. Browsers can run arbitrary code on your machine. Extensions ca
by evilpie 6y ago
> Browser extensions have exactly as much power as the browser itself
I would say this is false. Browsers can run arbitrary code on your machine. Extensions can't even access local files. If we are just talking about site information like cookies I would agree.
- edoceo 6y agoLocal File Browser extension for Chrome https://chrome.google.com/webstore/detail/local-explorer-file-manag/eokekhgpaakbkfkmjjcbffibkencdfkl?hl=en https://chrome.google.com/webstore/detail/local-explorer-fil...
- evilpie 6y agoOkay, but that requires installing a native code module.
- Groxx 6y agoNo, browser extension's can't. From their overview: >HOW TO SET UP >For security reason, Google has made a policy to not allow webpages to read-write local resource on hard drives. So we need an integration between the Chrome Extension and File System (Windows Explorer, Mac OS Finder) using an external software. To install both, just follow the simple steps described in http://www.vnprodev.com/browser-extensions/local-explorer-install.php http://www.vnprodev.com/browser-extensions/local-explorer-in... On a different note, Chrome "apps" historically have had higher access that allowed some file access (I forget the details), but as far as I can remember extensions have not had any ever. Though since you can communicate between apps and extensions, it was possible to install both and work around it a bit. I'm not sure if that has changed since I last toyed around with this though (it has been a couple years at least).
- paulryanrogers 6y agoI'm making extensions that talk to native apps. When that kind of communication is authorized then any vulnerability in the target apps does allow arbitrary execution.