search

arnoappenzeller / PiPifier

PiPifier is a native macOS 10.12 Safari extension that lets you use every HTML5 video in Picture in Picture mode
MIT License
761 stars 60 forks source link

"can read, modify and transmit content" #35

Closed keirthomas closed 7 years ago

keirthomas commented 7 years ago

No idea if this is new but Safari is now warning me that this extension "can read, modify and transmit content from all webpages. This could include sensitive information like passwords, phone numbers, and credit cards."

arnoappenzeller commented 7 years ago

This was added in Safari 10 for the new native extensions. In fact any browser extension could do this since it has access to the data of the current and could inject a malicious script that extracts for example phone numbers if you are on your iCloud contacts.

PiPifier is open source so everyone can check the app for malicious content, in addition there is AppReview for this and you can also check out every script inject by any extension using the web inspector.

All in all I would advice to only install browser extensions from trustworthy sources