News for hackers. Stuff that matters.

A comment on I no longer trust The Great Suspender. Parent comment

Re:I no longer trust The Great Suspender by angry_octet on Wednesday January 20, 2021 @12:39PM (#25849327)
Couldn't CSP be used to limit which paths were valid URLs?

There could also be hierarchies of extension permissions, because they don't all need to be able to do everything.

[ Parent | on HN ]
Re:I no longer trust The Great Suspender by gruez on Wednesday January 20, 2021 @12:46PM (#25849424)
extensions can also remove/add CSPs I think, either through modifying the header or modifying the DOM.
[ Parent | on HN ]
Re:I no longer trust The Great Suspender by angry_octet on Wednesday January 20, 2021 @12:58PM (#25849562)
Yes, but you could strictly limit which extensions had that permission, make it a site specific permission, etc. Auto disabling an extension that changes to require that permission would be a start.
[ Parent | on HN ]