Questions tagged [browser-extensions]
Browser extensions are additions to a web browser that provide extra functionality.
181 questions
0 votes
1 answer
35 views
How to find out if CSP report is XSS vulnerability or malicious browser extension?
I have recently added CSP headers to a rather complex web application, being -report-only at first. I got some noise from browser extensions in the report, but two incidents caught my eye especially: ...
- 417
0 votes
0 answers
21 views
Insights required on my naive aproach to audit Firefox extensions [closed]
I tried to search the web on existing projects, but after failed attempts, I decided to code something on my own way, one approach, open to comments and improvements: #!/usr/bin/env python3 import ...
- 101
0 votes
0 answers
18 views
Late 2025/2026 equivalent of ExtAnalysis to audit Firefox extensions? [closed]
I discovered ExtAnalysis, tried to run it in a Docker container, but this seems that this project is abandoned. There's too many errors. Some issues are opened since 2023 in the repository. So my ...
- 101
1 vote
0 answers
88 views
Using browser extension to allow webapp to extract user cookies for third party website [closed]
I have written an app that uses a bespoke browser extension to extract my cookies for a third party website so that the cookies can then be passed to selenium running on a server which allows selenium ...
- 11
1 vote
0 answers
86 views
If I want to use a browser extension I don't trust but limit its activity to certain sites only is it possible?
If I want to use a browser extension I don't fully trust but only on certain sites without sensitive information, is setting 'Site Access' to 'On Click' enough? Would this ensure the extension only ...
- 33
3 votes
1 answer
472 views
Can you help me understand JShelter's browser fingerprint protection?
I've been testing my browsers against these sites: https://www.thumbmarkjs.com/ https://fingerprint.com/ With JShelter in recommended mode I get same hash on ThumbMarkJS site on every page load but ...
- 41
1 vote
0 answers
143 views
Is there a way to limit browser extension internet access?
Most browser extensions I use are utility like tools that do something in the DOM. Like copying HTML tables to Markdown tables, accepting cookie warnings, removing ads, regex find replace et cetera. ...
- 7,715
1 vote
0 answers
90 views
How to allow or denylist specific browser extensions in popular browsers? [closed]
After the recent news of multiple compromised popular browser extensions. Is it possible for organizations to setup browser extension allow and denylists for common browsers such as Edge, Chromium-...
- 7,715
4 votes
1 answer
1k views
Firefox containers vs profiles, how contained are they?
A "privacy by compartmentalization" measure I used to implement in my day to day surfing was to separate each part into Firefox profiles. (Work, Study, Finance...) Recently I learned about ...
- 41
21 votes
2 answers
5k views
Could a Google Chrome extension read my password?
I am concerned about the security of my passwords while using Google Chrome extensions. Specifically, I'd like to know if it's possible for a Chrome extension to read passwords that I enter on ...
- 321
2 votes
2 answers
1k views
How to determine which Chrome extension is re-directing me to ad sites
Twice now, seemingly randomly, I've been redirected to an ad site. I believe it has occurred both times when I have a new tab open, type what I'm searching for (Google is my default search engine), ...
- 21
1 vote
1 answer
932 views
Are 2FA browser plugins sufficiently secure?
Regarding 2FA browser plugins, I follow the uneducated opinion that they usually provide sufficient security. Since a desktop computer is a unique device (even a virtual machine) and provides that ...
- 113
1 vote
1 answer
422 views
Can a browser-based HTTPS proxy secure browsing data while using a system-level proxy?
I use Nekoray to set up proxies for my Windows system. When I connect to those proxies, does using a browser-based proxy with HTTPS encryption secure my transferred data through the web browser? Can ...
- 113
1 vote
0 answers
151 views
Why is not there encrypted way of sharing/showing data such as Password to the user (hidden from web app Source code)?
I wonder if there will be (or is) a way to hide data such as passwords from the HTML/DOM structure? As, password fields can hide from external person other than the main user with something like "...
- 11
1 vote
1 answer
611 views
How do you hide your browser advertising fingerprint?
How do you hide your browser finger print from advertising networks without disabling javascript? Is there a browser extension that can help mask unique browser fingerprint? Browser finger print can ...
- 265