4 ms·
>>If the extension has a ton of reviews, doesn't it sort of vouch for credibility? Yes and no. You can't be really sure. They might contain vulnerabilities htt
by ementally 4y ago
>>If the extension has a ton of reviews, doesn't it sort of vouch for credibility?
Yes and no. You can't be really sure. They might contain vulnerabilities https://portswigger.net/research/ublock-i-exfiltrate-exploiting-ad-blockers-with-css https://portswigger.net/research/ublock-i-exfiltrate-exploit... not necessarily intended.
You can read more here https://github.com/beerisgood/Security-link-collection https://github.com/beerisgood/Security-link-collection , "Some examples why browser extensions are bad - since at least....."
>>And if they say they can't "read or change data on this website"?
Extensions need access to those to make changes on webpages you visit. However, you can go to manage extension and limit to specific pages instead of all sites.
That's why Google is going for Manifest V3.