2 ms·
> permissions are firmly controlled Not meaningfully. A tampermonkey script has complete access to the information in a webpage it runs in. This is necessary f
by Retr0id 3y ago
> permissions are firmly controlled
Not meaningfully. A tampermonkey script has complete access to the information in a webpage it runs in. This is necessary for its operation and not something I have a problem with, but I'd never say its an improvement in terms of security.
- Retr0id 3y agoFurther, there's no requirement that a tampermonkey script be open-source. They usually are, but so are the regular extensions I choose to install. I don't know about chrome, but Firefox also allows automatic updates to be disabled on a per-extension basis. I'm a fan of userscripts but lets not pretend they're magically better.
- deleted 3y ago[deleted]
- bmacho 3y agoThere is a block and allowlist for which sites can it run. For example Firefox can't even control on which websites the extensions run. This is stupid and bad. Tampermonkey just does this thing right too. Edge at least has an allowlist, if I'm not mistaken.
- Retr0id 3y agoThe permissions to run scripts in the context of a webpage (i.e. full access, what tampermonkey does) are gated on a per-site level. E.g. here's the "bypass paywalls" extension requesting permission to inject content scripts into particular domains sites: https://github.com/iamadamdev/bypass-paywalls-chrome/blob/c66fb6d18ab35488ee0f7c14011b9eb1d9b764f6/manifest-ff.json#L11-L80 https://github.com/iamadamdev/bypass-paywalls-chrome/blob/c6...