3 ms·

But that's not the case! declarativeNetRequest still allows adblockers to modify arbitrary content or send requests to their own servers, and the webRequest API

But that's not the case! declarativeNetRequest still allows adblockers to modify arbitrary content or send requests to their own servers, and the webRequest API still allows extensions to track every request and analyze it. There's no security gained whatsoever. If it was about security, the webRequest API would have been removed entirely, but they didn't do that, they just changed it enough to prevent it being used by adblockers while continuing to allow tracking.

charcircuit 4y ago
>declarativeNetRequest still allows adblockers to modify arbitrary content or send requests to their own servers That requires a separate permission and a host permission to do that compared to just blocking requests. >and the webRequest API The webrequest API needs separate permissions. This is a matter of principle of least privilege than changing what's possible. Can we give extentions the minimum amount of permission in order for them to still be useful