3 ms·
I only use a few and they're simple enough I can read them before updating to see if they're bringing in something weird. Also in GP's case they could just writ
by rtkwe 3y ago
I only use a few and they're simple enough I can read them before updating to see if they're bringing in something weird. Also in GP's case they could just write their own since they're already making them. No exploitable surface there if it's not a remote updatable script.
- lolinder 3y agoIt's not the bookmarklets that OP is warning about, it's the risk that the GreaseMonkey extension itself becomes compromised. Basically, it's good browser hygiene to keep the number of extensions you have installed to an absolute minimum. A bookmarklet alone isn't so much a concern, both because it doesn't run automatically on all pages (only when clicked) and because, as you note, you can usually pretty easily audit what you add and you don't get automatic updates.
- gabrielsroka 3y ago> you don't get automatic updates Unless the bookmarklet updates itself by loading code from another URL. This is blocked by some websites but not all.