Major sites running unauthenticated JavaScript on their payment pages

Re:Major sites running unauthenticated JavaScript on their p... by O_H_E on Friday November 30, 2018 @12:28PM (#18570677)

>if you could download the unminified/unbundled source code and install the extension yourself locally

Do you mean for a proprietary extension? AFAIK loading sources locally works fine in chrome.

[ Parent | on HN ]

Re:Major sites running unauthenticated JavaScript on their p... by danShumway on Friday November 30, 2018 @03:27PM (#18572322)

In Firefox, loading unsigned extensions is severely restricted. It's a separate process to install them, and they'll only last until you restart the browser.

I'm not sure what Chrome's specific rules are; I think they allow loading local sources in dev mode, but warn you about it every time the browser launches? I generally advise people to avoid Chrome if they care about security/privacy anyway, so I've never checked in detail.

But if Chrome does have a way for you to easily load extensions from source, and you're comfortable using it as a main browser, that could be a valid way for you to tackle a problem like this.

[ Parent | on HN ]

Re:Major sites running unauthenticated JavaScript on their p... by O_H_E on Saturday December 01, 2018 @09:43PM (#18580476)

Interesting to see Mozilla restricting freedom that given their userbase.

[ Parent | on HN ]