3 ms·
Is there some way to stop browsers (and browser extensions) from injecting JavaScript into a website? I don't think there is, but wanted to ask. I normally set
by seethishat 2y ago
Is there some way to stop browsers (and browser extensions) from injecting JavaScript into a website? I don't think there is, but wanted to ask. I normally set script-src 'none' in my Content Security Policies (HTTP header and HTML meta tag) because I do not use JavaScript, but that does not stop an extension from removing that header/tag and injecting JS.
Does anyone know if this is possible?
- tracker1 2y agoOther sites, yeah... extensions, not so much... extensions are things the user wants (or at least seems to want) to include. Poorly written extensions aren't great but it's a user issue. Could you imagine, for example, the NYT being able to disable your ad blocker extension?
- seethishat 2y agoYes, good point. I was not thinking of it from that perspective. It's a client issue, I'll stop worrying about it.