Questions tagged [browser-extensions]
Browser extensions are additions to a web browser that provide extra functionality.
19 questions with no upvoted or accepted answers
5
votes
0
answers
696
views
Can Chrome extensions access other Chrome extensions' data?
Can the data in a password-manager Chrome extension be accessed by a different Chrome extension? For example, if one were to install a malicious extension, could that extension access the data (i.e., ...
- 51
4
votes
0
answers
470
views
Some http requests are not send encrypted by vpn! Why?
I subscribed to a VPN service recently, and installed wireshark to take a look at the traffic sent from my computer.
Practically all of it goes through UDP protocol, encrypted. But there are two HTTP ...
user53437
3
votes
0
answers
6k
views
Does this list every Chrome extension/addin that may leak privacy?
I am looking for a simple list of all extensions, preference, custom processes, and "flags" that may disclose a user's privacy or other details to a 3rd party.
To that end, I discovered: chrome://net-...
- 51.1k
2
votes
0
answers
282
views
What is the threat-model of a malicious browser-extension accessing the data of *another browser-extension* that is security-critical?
Modern password-managers are moving towards a "fully-in-the-browser" model (see: historical RCE on LastPass, and now 1Password is also moving towards 1Password X as "the future" ...
- 285
2
votes
0
answers
176
views
Collecting PII in an iframe on any website. Is it Safe?
I am building a chrome extension that allows users to submit a form on any website. Once a user would visit a certain website, extension would open iframe on that website and ask user for some PII in ...
2
votes
0
answers
325
views
How to secure communication between page and browser extension?
In my browser plugin I want to detect any use of a built-in JavaScript function. I override this function by injecting a piece of code onto the page. This code then triggers an event, and an event ...
- 34.4k
2
votes
0
answers
154
views
Is it possible to "polyfill" a vulnerable Flash player to a users machine when they visit a web page?
This is about the concept of adding "necessary code" to a webpage to ensure that any client can view the "content" provided through that page. This sort of code is sometimes referred to as a polyfill.
...
- 131
1
vote
0
answers
124
views
Why is not there encrypted way of sharing/showing data such as Password to the user (hidden from web app Source code)?
I wonder if there will be (or is) a way to hide data such as passwords from the HTML/DOM structure? As, password fields can hide from external person other than the main user with something like "...
- 11
1
vote
0
answers
239
views
GPU vs integrated graphics hardware, browser canvas fingerprinting, and multi- or dual-boot systems
My goal is to ensure that two operating systems installed side-by-side on the same device are unable to return the same canvas fingerprint, when a modern browser is allowed to run javascript without ...
- 1,135
1
vote
0
answers
974
views
Security of Third Party Plugins in Thunderbird
In Thunderbird (a popular open source email client), there is an extension store similar to Mozilla Firefox which adds further functionality to the client. Mozilla has an article detailing the ...
- 77
1
vote
0
answers
277
views
Do WebEx's requirements open security holes?
After a WebEx presentation is recorded, the recording cannot be played in-browser without installing a browser extension that requires invasive permissions to access the user's data for all websites:
...
- 11
1
vote
0
answers
97
views
Why can't VPN extensions filter everything in the browser?
For example, when I'm using one of this extensions, such as ZenMate or Browsec, I'm not able to watch video streamings. Or another thing that happened is my internet provider detecting me going on a ...
- 11
1
vote
0
answers
101
views
Question about the Perspectives add-on, is this dangerous?
When I visited Google and Facebook, and then clicked on the Perspectives add-on button to check the certificate information, I saw this:
What does this mean? Shouldn't it have ...
- 175
0
votes
0
answers
100
views
What can be leaked using a browser extension where one of the extensions loads JavaScript from a remote site?
Can one remotely log my IP, browser history, and saved passwords?
I think the IP should be easily done if one of the extensions load a remote JavaScript to run in my browser. I'm not sure about other ...
- 157
0
votes
0
answers
116
views
Web Browser Forgetting Between Users
I am planning to go door-to-door and host events in which people use a computer to login to the Arizona Secretary of State website, enter sensitive information (like address, social security number, ...
- 51
0
votes
0
answers
530
views
How to tell if my browsers are infected by ADROZEK?
MS has exposed ADROZEK:
https://www.zdnet.com/article/microsoft-exposes-adrozek-malware-that-hijacks-chrome-edge-and-firefox/
I would like to know if the browsers (Chrome, blue ff) of my Ubuntu 20.04....
- 101
0
votes
0
answers
126
views
Domain Joined computer doesn't browser properly with any website with Let's Encrypt CA cert
Navigating to any website with Let's Encrypt CA cert and even after enabling the HTTPS Everywhere addon,
I'm getting "Your connection is not private".
Getting this error from all the browser except ...
- 111
0
votes
0
answers
134
views
Is authorizating add-ons in this way secure?
I have a website, for which I made accompanying add-on to Firefox and Chrome. Both of those are distributed privately. In Firefox they can be installed only from my website, and for Chrome the link to ...
- 3,843
0
votes
0
answers
122
views
Are there known cases when malicious Javascript or Chrome/Firefox extension copied certificate from browser?
I have a certificate that must be manually installed on my browser in order to have a secure connection with a specific website.
Are there known cases of malicious Javascript or Chrome/Firefox ...
- 115