6 ms·
Build a scraper / content extractor service. But you still can't inject anything without those permissions.
by tiborsaas 6y ago
Build a scraper / content extractor service. But you still can't inject anything without those permissions.
- bananaface 6y agoIt would be nice if Firefox provided an API that only exposed the static HTML of sites you're visiting. I don't care if an extension wants that data, it's nowhere near as sensitive. I guess this doesn't solve injection, but there must be other ways to solve "display some additional data."
- tiborsaas 6y agoGreat idea, after all it's impossible to render sensitive data server side :)
- bananaface 6y agoI said it's less sensitive.
- tiborsaas 6y agoDoes it matter? Btw here is your API: document.body.innerHTML
- bananaface 6y agoAnd which permission do I take to access that?
- tiborsaas 6y agoAs a bookmarklet, none :) That's the best you can get.
- deleted 6y ago[deleted]