|
|
|
|
|
|
by xboxnolifes
468 days ago
|
|
|
> And a great way to give permission to read and modify all websites you visit to something that should really better be an isolated application. Then don't do that. Give them permission to only read specific sites, or even no access if they don't need it. |
|
|
Manifest V2 doesn't even support fine-grained permissions like that (they have to statically declare all sites they ever want to access at build time, and users have to accept all of them at install time).
Manifest V3 is better and offers a dynamic API to request more permissions on a per-site basis, but it's still not perfect – for example, Chrome presents the "proxy" permission as "read and change data on all websites", so as a user, I have no idea if a VPN extension just wants the proxy permission, or write permissions to every site I visit.