News for hackers. Stuff that matters.

A comment on More on DataSpii: How extensions hide their grabs and how they’re discovered. Parent comment

Re:More on DataSpii: How extensions hide their grabs and how... by vengefulduck on Thursday July 18, 2019 @01:25PM (#20472024)
I bet it’s for user script extensions like tamper monkey.
[ Parent | on HN ]
Re:More on DataSpii: How extensions hide their grabs and how... by itcrowd on Thursday July 18, 2019 @01:30PM (#20472084)
Tamper monkey is also available for Firefox, which doesn't allow unsafe-eval ..

[edit]: just checked, tamper monkey on chrome has the following policy:

"content_security_policy": "script-src 'self' https://ssl.google-analytics.com; object-src 'self'"

[ Parent | on HN ]
Re:More on DataSpii: How extensions hide their grabs and how... by heavenlyblue on Thursday July 18, 2019 @01:54PM (#20472303)
Firefox doesn’t allow plugins with unsafe-eval to their store.
[ Parent | on HN ]