[dedoussis]

> Benefits of the Manifest V3: none

V3 not allowing remote code execution is actually a serious benefit. Of course, this does not negate the fact that V3 is mainly there to boost the ad ecosystem of Google, but I'd never want my screen casting extension to be mining bitcoin on the background. That said, I'm not sure how this is going to scale long term, given that it sometimes takes 2+ weeks for the web store review team to approve a genuine one-line change. Lack of RCE is only going to make this review backlog bigger.

[rasz]

>V3 not allowing remote code execution is actually a serious benefit.

This is Google Kool-Aid. When Google says "remote code", they mean _remote to google_. Your own script on your own drive is remote to google. Google is removing User from the User Agent.

[dedoussis]

Well, in this instance remote code actually means remote. In V3 one can no longer use the tabs.executeScript API [1] in which you could pass an arbitrary server rendered string.

[1] https://developer.chrome.com/docs/extensions/reference/tabs/...

[rasz]

V3 kills Userscripts (tampermonkey/violentmonkey). You will no longer be able to execute your own code written with your own hands&brain and stored on your own hard drive.

[abraham]

Userscripts should go into testing soon. https://developer.chrome.com/docs/extensions/mv3/known-issue...

[danbulant]

You can make your own local extension. People will just write easy tool to generate an extension out of userscript(s).

Still not good that they removed that...

[josephcsible]

Disallowing remote code by default could be considered a benefit, but disallowing me from saying "I trust this one particular source of remote code; please let it execute" is most definitely not.

[xani_]

I'd bet FAR more people got infected by malicious ads than "some site cajoled them into running an extension"

> but I'd never want my screen casting extension to be mining bitcoin on the background

You'd "just" get ads or sites doing it

[jerrygoyal]

> V3 not allowing remote code execution is actually a serious benefit.

not true. they're going to allow RCE now.

> given that it sometimes takes 2+ weeks for the web store review

Not true at least in my experience. Approval takes around 2-4 days max for my extension.

[dedoussis]

I'd say 2-4 days is the median. There have been 2 instances of me needing to wait 2 weeks for a one-liner.