Hacker News new | ask | show | jobs
by rasz 1353 days ago
>V3 not allowing remote code execution is actually a serious benefit.

This is Google Kool-Aid. When Google says "remote code", they mean _remote to google_. Your own script on your own drive is remote to google. Google is removing User from the User Agent.

1 comments

Well, in this instance remote code actually means remote. In V3 one can no longer use the tabs.executeScript API [1] in which you could pass an arbitrary server rendered string.

[1] https://developer.chrome.com/docs/extensions/reference/tabs/...

V3 kills Userscripts (tampermonkey/violentmonkey). You will no longer be able to execute your own code written with your own hands&brain and stored on your own hard drive.
You can make your own local extension. People will just write easy tool to generate an extension out of userscript(s).

Still not good that they removed that...