News for hackers. Stuff that matters.

A comment on How to convert existing web extensions for Safari. Parent comment

Re:How to convert existing web extensions for Safari by ffpip on Wednesday January 06, 2021 @06:51AM (#25656869)
I think the privacy argument is that extensions cannot steal cookies. The current model grants extensions permission to steal cookie values right?

I am unfamiliar, so please feel free to correct me. Thanks for uBO!

[ Parent | on HN ]
Re:How to convert existing web extensions for Safari by gorhill on Thursday January 07, 2021 @10:54AM (#25672413)
You can observe `Cookie` header with a webRequest.onHeadersReceived listener.

Documentation about what can be observed or not is all available online, there is no need to make any assumption:

Firefox: https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/Web...

Chromium: https://developer.chrome.com/docs/extensions/reference/webRe...

That should answer all questions regarding what can be observed.

[ Parent | on HN ]
Re:How to convert existing web extensions for Safari by ffpip on Thursday January 07, 2021 @11:20PM (#25681469)
Thanks for the links. I should read up on that. So the privacy argument is false.
[ Parent | on HN ]