News for hackers. Stuff that matters.

A comment on I no longer trust The Great Suspender. Parent comment

Re:I no longer trust The Great Suspender by gruez on Wednesday January 20, 2021 @12:46PM (#25849424)
extensions can also remove/add CSPs I think, either through modifying the header or modifying the DOM.
[ Parent | on HN ]
Re:I no longer trust The Great Suspender by angry_octet on Wednesday January 20, 2021 @12:58PM (#25849562)
Yes, but you could strictly limit which extensions had that permission, make it a site specific permission, etc. Auto disabling an extension that changes to require that permission would be a start.
[ Parent | on HN ]