4 ms·
A script loaded by a site needs to escape its sandbox. I assume an extension script is not in its own sandbox so it can read you banking details when you visit
by jay_kyburz 5y ago
A script loaded by a site needs to escape its sandbox. I assume an extension script is not in its own sandbox so it can read you banking details when you visit a banking website. I imagine they can read key presses so an extension can know your banking passwords.
- hungryfoolish 5y agoWhich is why extensions also nowadays only served via a web store which has moderation policies and moderators which look for this kind of stuff.
- ocdtrekkie 5y agoThe Chrome Web Store is functionally a malware distribution system. There's no real moderation to speak of, and the vast majority of desktop PC malware is distributed by it.