News for hackers. Stuff that matters.

A comment on Chrome exempts Google sites from user site data settings. Parent comment

Re:Chrome exempts Google sites from user site data settings by stefan_ on Sunday October 18, 2020 @01:59PM (#24819785)
A trivial "backspace to go back" extension needs access to all sites. Fraudsters buy semi-popular extensions and load them up with tracking and link rewriting malware, unhindered by Google.

Their continued "refinement" of the core ad blocker APIs while all these abuses and deficiencies go unaddressed is extremely suspicious.

[ Parent | on HN ]
Re:Chrome exempts Google sites from user site data settings by lima on Sunday October 18, 2020 @02:18PM (#24819936)
> A trivial "backspace to go back" extension needs access to all sites.

Yes, this is bad and a big security risk. I don't use any extensions that request this permission. My company even pushes a Chrome policy that outright blocks them.

Manifest v3 fixes this by taking away blanket <all_urls> permissions. This would break ad blockers, so they add declarativeWebRequest and remove the blocking webRequest API that would be useless anyway.

[ Parent | on HN ]