I think Code Verify (mentioned in the article) is the right approach https://engineering.fb.com/2022/03/10/security/code-verify/ https://engineering.fb.com/2022

I think Code Verify (mentioned in the article) is the right approach https://engineering.fb.com/2022/03/10/security/code-verify/ https://engineering.fb.com/2022/03/10/security/code-verify/ Although it's all open source, if you install the published version of their extension, iiuc, it will only work with certain facebook sites out of the box. There should be an easier way to enroll new sites - I'm thinking TOFU with fingerprinting.