Chrome extensions with 10M+ devices are actively vulnerable to UXSS and UXSG

Posted by galwm on Thursday June 11, 2026 @09:38AM
from the rebora.io dept.

( 1 comment | 9 points | on HN )

Re:Chrome extensions with 10M+ devices are actively vulnerab... by tsuberim on Thursday June 11, 2026 @10:08AM (#48490590)

Alarming. Same origin policy not strong enough. I suppose a lot of extensions may be similarly vulnerable.

[ Parent | on HN ]