Chrome extensions with 10M+ devices are actively vulnerable to UXSS and UXSG

2 comments

• tsuberim 4 hours ago

  Alarming. Same origin policy not strong enough. I suppose a lot of extensions may be similarly vulnerable.

• galwm 5 hours ago

  [dead]