Hacker News new | ask | show | jobs
by zulln 2910 days ago
Back in 2015 when Detectify (me being co-author) looked into this issue [1] many plugins do not actually have this code in the extensions, but rather a feature to download remote code and add it to the extension so to say. As long as that practice is allowed, source review would not help.

[1] https://labs.detectify.com/2015/11/19/chrome-extensions-aka-...

1 comments

AFAIK this isn't allowed in firefox extensions
It still isn't.