IT Security Stack Exchange
IT Security Stack Exchange

Questions tagged [browser-extensions]

Browser extensions are additions to a web browser that provide extra functionality.

A browser extension, also called an "add-on" or (erroneously) "plug-in" is an addition to a web browser which enhances the browser's functionality.

This tag covers general questions about browser extensions, as well as questions regarding a specific extension.

Official extension galleries for popular browsers:

168 questions
172
votes
9 answers

Is Adblock (Plus) a security risk?

My email-provider's website (http://www.gmx.de) recently started linking to the (German) site http://www.browsersicherheit.info/ which basically claims that due to its capabilities to modify a site's appearance, Adblock Plus (and others) might…
Tobias Kienzler
  • 7,578
  • 10
  • 43
  • 66
82
votes
2 answers

Worst case scenario, what can a Chrome extension do with "Your data on all websites" and "Your tabs and browsing activity"?

Chrome extensions, and just like other browsers, appear to often get quite some extensive access to your browser data. In fact, most extensions I've installed require access to: Your data on all websites Your tabs and browsing activity And this…
please delete me
  • 1,235
  • 2
  • 10
  • 7
70
votes
8 answers

Why use HTTPS Everywhere when we have HSTS supported browsers?

I know that the browser's default protocol to access any site is http:// when https:// is explicitly not mentioned, but even then if we browse to a website say www.facebook.com, the response header from the Facebook servers would have HSTS mentioned…
GypsyCosmonaut
  • 882
  • 1
  • 7
  • 16
65
votes
6 answers

Are there objective reasons to not allow Google Chrome extensions, but to allow Firefox extensions?

Recently, the company I work for has forbidden usage of any extensions in Chrome. They also do not allow account sync. This affected virtually all Web developers since they use Chrome to test their front-end code and use an extension or two to…
Alexei
  • 2,183
  • 3
  • 9
  • 23
39
votes
1 answer

Can a browser extension (Chrome, Firefox, etc.) read the web console log?

I realized that my bank handles sensitive information in the web console log, so my concern is if any browser extension could read the log?
Nyan D' Sparkle
  • 509
  • 4
  • 6
32
votes
3 answers

Are official browser add-ons really safe?

Almost any browser addon/extension that I install on my Chrome or Firefox (be it Firebug, RESTClient, ...) warns me, saying: It [the add-on] can: Access your data on all website Access your tabs and browsing activity Now, practically speaking, I…
Harry
  • 861
  • 8
  • 12
32
votes
5 answers

How do I know if a Google Chrome extension is leaking data?

Many Google Chrome extensions require permissions to read the contents of webpages the user visits. How can the user verify whether and to what extent a certain Chrome extension leaks data?
gen
  • 1,660
  • 2
  • 18
  • 18
27
votes
3 answers

Is Firefox Password Manager less secure than LastPass?

After installing the LastPass password manager, I am presented with a login dialog including the option to "Disable Insecure Firefox Password Manager". (This option appears as long as the Firefox Password Manager is enabled, whether or not a master…
lofidevops
  • 3,550
  • 6
  • 23
  • 32
24
votes
2 answers

Why do Chrome extensions need access to 'all my data' and 'browsing activity'?

Often I install simple add-ons for Google Chrome. However, they almost all need what appears to me as excessive access to my data. For instance, I install an extension that allows me to click on any part of a page and it gives me the color of the…
user5672
18
votes
5 answers

Is using "HTTPS everywhere" extension secure?

I would like to know if one should use 'HTTPS everywhere' extension? Is it secure to use it? Are there any better alternatives? HTTPS Everywhere is a Firefox and Chrome extension that encrypts your communications with many major websites, making…
vaichidrewar
  • 283
  • 1
  • 2
  • 6
17
votes
6 answers

How to prevent installation of Google Chrome extensions

How can I prevent the installation of Chrome extensions on desktop?
gpupo
  • 319
  • 1
  • 3
  • 8
17
votes
1 answer

Is Vimium (Chrome extension) really safe?

I really like the Chrome extension Vimium. It significantly speeds up surfing for power users. However, when you install it, Chrome warns you because this extension injects JS code on every page you visit (which is potentially unsafe). The author…
celicni
  • 173
  • 1
  • 5
17
votes
2 answers

Is Stylish safe to use again?

Stylish is/was a very popular extension for the Chrome and Firefox web browsers, which let users add custom styles to certain websites. I was using it myself, until a helpful fellow told me it was apparently spyware; new owners decided to engage in…
Glorfindel
  • 2,235
  • 6
  • 18
  • 30
17
votes
6 answers

Is privacy compromised when sharing SHA-1 hashed URLs?

I'm working on a small side project which involves a browser add-on and a backend service. The service is pretty simple. Give it a URL and it will check if the URL exists in a database. If the URL is found some additional information is also…
Jibran
  • 273
  • 2
  • 5
14
votes
2 answers

Can a Firefox add-on or plug-in access the user's websites' saved passwords in decrypted mode?

Going deeper into the previous question on Firefox plugins and add-ons malware risks: Could a Firefox add-on potentially decode and capture the encrypted websites' passwords saved in the browser?
Guillermo
  • 149
  • 3
1
2 3
…
11 12