All Questions
Tagged with browser-extensions web-browser
11 questions
32
votes
3
answers
5k
views
Are official browser add-ons really safe?
Almost any browser addon/extension that I install on my Chrome or Firefox (be it Firebug, RESTClient, ...) warns me, saying:
It [the add-on] can:
Access your data on all website
Access ...
- 841
173
votes
9
answers
246k
views
Is Adblock (Plus) a security risk?
My email-provider's website (http://www.gmx.de) recently started linking to the (German) site http://www.browsersicherheit.info/ which basically claims that due to its capabilities to modify a site's ...
- 7,988
13
votes
2
answers
2k
views
Can a Firefox add-on or plug-in access the user's websites' saved passwords in decrypted mode?
Going deeper into the previous question on Firefox plugins and add-ons malware risks: Could a Firefox add-on potentially decode and capture the encrypted websites' passwords saved in the browser?
- 139
12
votes
2
answers
1k
views
What should I look for when auditing a Firefox extension / plugin?
I've been asked to do a security audit on a Firefox add-on developed by a third party. I am a web developer with a reasonable grasp of JavaScript but am not a browser security expert.
What kinds of ...
- 222
11
votes
1
answer
1k
views
Danger of browser extension without any permissions?
Assuming that an extension for Firefox or Chrome does not request any WebExtensions permission, what harm could this extension do?
Or put another way: What (potentially malicious) actions can an ...
- 29.8k
10
votes
1
answer
2k
views
How do I check the code of a Chrome extension to make sure it's not stealing my info?
I've been reading more and more about just how much access browser extensions can have to your data. This is a little unsettling, so I'm curious if there is a way to Vet these extensions and make sure ...
- 1,771
8
votes
3
answers
2k
views
Browser setups to stay safe from malware and unwanted stuff
I have to set up a browser to surf the internet. I'm trying to stay safe from malware as much as possible. (I already know that there's no way to stay 100% safe.)
My idea is to use Firefox with these ...
- 83
2
votes
3
answers
2k
views
Can a shim (a.k.a. polyfill) be installed in IE, FF, or Chrome without user knowledge, and can it read passwords entered by user on a login page?
The questions here are about shims in the 3 most commonly used browsers.
A shim (also known as polyfill) is a piece of code (often JavaScript or Flash) implemented to augment the native API in a web ...
user63673
2
votes
1
answer
735
views
How do password managers implement secure browser integration? [closed]
Some password managers can automatically fill passwords in user's browser. But for this auto-fill to be secure, they have to make sure they are putting password in the correct input field, plus, the ...
- 1,693
2
votes
1
answer
671
views
Twitter.com in private browsing leaks data to normal browser. Other sites as well? Bug or feature?
This is the first time I encountered similar thing. When I log into the Twitter web site in Chrome (namely, the Iron version which is said to be security enhanced, but that does not matter here) in ...
- 1,151
1
vote
1
answer
159
views
How do modern browsers isolate different addons?
A user may have multiple addons installed on a browser. But typically, the browser is running in userspace with an unprivileged uid. I was wondering how modern browsers can, in such a setting, provide ...
- 1,693