3 ms·
Yeah, things have been downhill since they killed the old plugin system. Though I think this should be possible with the current plugins. I understand the secu
by dec0dedab0de 2y ago
Yeah, things have been downhill since they killed the old plugin system. Though I think this should be possible with the current plugins.
I understand the security problems with the old way, but they could have spent all these years working on a sandbox with granular permissions.
But for something like this they could make a system that only works with their own official plugins. tie the plugin versions to browser versions, and include the hashes of every plugin. people could install whichever ones they want, and malicious plugins wouldn’t be able to just drop in without also editing the browser binary.
Im sure there are a million other ways too, but designing a secure plugin system for first party software is so much easier than one for third party software.