Chrome extensions with 10M+ devices are actively vulnerable to UXSS and UXSG

2 comments

• tsuberim 13 days ago

  Alarming. Same origin policy not strong enough. I suppose a lot of extensions may be similarly vulnerable.

• galwm 13 days ago

  [dead]