Skip to content

Extension Security Audit (ESA) #50

@NDevTK

Description

@NDevTK

This extension allows websites to pause, mute, resume and detect audible media cross-origin.
This is a trade-off for functionality but it needs to be reviewed what's possible from an evil content script to ensure there's always a valid justification. For example the tabFocus, ignoreTab message allowing document pip support should not exist and is likely going to be abuseable.

Permission requests promotes <all_urls> usage hopefully Ask for permission to run on audible tabs might work as a replacement when the API is ready (not crashing).

Sub-issues

Metadata

Metadata

Assignees

Labels

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions