search

SpaceK33z / web-to-plex

🚠 Adds a button on various movie & TV show sites to open it in Plex.
Other
122 stars 18 forks source link

Issue: Major Security Flaw #152

Closed Ephellon closed 4 years ago

Ephellon commented 4 years ago

Describe the error No event listener asks for "isTrusted" (explicitly granted by user).

To Reproduce Steps to reproduce the behavior:

  1. N/A

Estimated location utils.js

Screenshots N/A

Extension Information

Additional comments Fixed before opening ticket.

Ephellon commented 4 years ago

Simply, scripts can grant their own permissions.

Ephellon commented 4 years ago

Keeping an eye peeled for anything that circumvents the isTrusted method