#Webbrowser: #GoogleChrome erhält Erweiterungs-Sicherheitsprüfung | Security https://www.heise.de/news/Webbrowser-Google-Chrome-ueberprueft-Browser-Erweiterungen-9268593.html #ChromeBrowser #Browser #BrowserExtensions #ExtensionsSecurity #AddOn #BrowserAddOn #AddOns #BrowserAddOns

Honestly struggling with #Chrome's Manifest V3 limitations regarding its background script. Can't get any long-lived processes working, and managing hydration of states during suspension and wake up is troublesome as #serviceworkers don't fire events for this.

I'm honestly afraid that I'll just have to fall back and get the browser extension to rely on the desktop app.. And this really defeats all the strides @buttercup has made with its browser extension being its own application. Don't want to do it but I'm seeing no other *reliable* way.

Anyone else out there building #browserextensions hitting this road block? Would really appreciate any words of encouragement or suggestions as to what to do here..

#browserextension #browseraddon #browseraddons #firefox #manifestv3

Already sick of #chrome’s manifest V3 for extensions. The requirement to have service workers instead of background daemons means I can’t keep my password manager’s data in memory.

What am I supposed to do, decrypt the user’s vault every time the service worker wakes?

Anyone have any better ideas? I’d prefer to not have to rely on the desktop app for the “live” vault data, as having a stand alone extension is valuable as a feature in itself.

#googlechrome #manifestv3 #serviceworkers #serviceworker #browserextensions #browserAddons

Did you know that `BroadcastChannel` exists? I didn’t until recently 🤦‍♂️

https://developer.mozilla.org/en-US/docs/Web/API/BroadcastChannel

Modern browser feature to allow message sending between same-origin tabs. Works great for websites and extensions alike. I’m mind-blown.. this totally snuck up on me.

Am now using it in the @buttercup browser extension for inter-tab/popup/background communication as the extension has its own origin. Funny that this seems way more efficient and simple when compared to the native alternatives for extensions (runtime.addListener, sendMessage etc.).

#javascript #browsers #browserextensions #browserAddons #chrome #firefox #edge

We are not very impressed about this but #TailsOS users have a different #fingerprint to regular #TorBrowser users.

TailsOS adds #uBlock addon

So its arguable that you could match the #fingerprint of a TailOS user by using the #addon.

Its odd that Tails added it (or that #TorProject isn't).

This may change.

Those who are #Cloudflare-aware can use #BCMA (Block Cloudflare MITM Attack).

#onionMaximalist #browserAddons #MITMAttack