Chrome extensions with 10M+ devices are actively vulnerable to UXSS and UXSG (opens in new tab)

(rebora.io)

9 pointsgalwm16d ago1 comments

1 comments

1 comments · 1 top-level

Alarming. Same origin policy not strong enough. I suppose a lot of extensions may be similarly vulnerable.

j / k navigate · click thread line to collapse