Nearly 200 extensions for Chrome and Firefox vulnerable to data theft

The extensions open internal programming interfaces for web applications. This allows a malicious Web site to access the data available to the extension. While Firefox and Opera delete the add-ons, Google checks whether the errors can be corrected.

👉 Empowering Web Applications with Browser Extensions
Universite Cote d’Azur / Inria, Francedoliere.some@inria.fr
http://www-sop.inria.fr/members/Doliere.Some/papers/empoweb.pdf

#browser #extensions #chrome #firefox #datatheft
📡 @cRyPtHoN_INFOSEC_DE
📡 @cRyPtHoN_INFOSEC_EN