4 ms·

If there's one website I would never in a million years let a closed-source, venture-backed browser extension inject content into, it's console.aws.amazon.com.

• Diederich 5y ago
  > closed-source Why do you believe that? https://github.com/deref/deref-browser-extensions https://github.com/deref/deref-browser-extensions
  • alexcroox 5y ago
    Chrome extensions don't mirror GitHub source, they can upload whatever they want in the zip file.
    • brandonbloom 5y ago
      It's pretty easy to install from source, if that's your preference. We'll get some build/install instructions in to the readme.
• swyx 5y ago
  i dont disagree with your point here but just want to raise awareness that anyone can "view source" browser extensions: https://chrome.google.com/webstore/detail/chrome-extension-source-v/jifpbeccnghkjeaalbbjmodiffmgedin?hl=en https://chrome.google.com/webstore/detail/chrome-extension-s... of course, code obfuscation is a thing.
  • crtasm 5y ago
    and remember to stop the extension auto-updating (I assume Chrome lets you do so..?) and review any changes.