2 ms·Chrome extensions with 10M+ devices are actively vulnerable to UXSS and UXSG9 points by galwm 4mo agotsuberim 4mo agoAlarming. Same origin policy not strong enough. I suppose a lot of extensions may be similarly vulnerable.galwm 4mo ago[dead]