Closed paulirish closed 8 years ago
Love it!
It was actually thinking of doing this, but changing the API to generate a UUID in the connect hello
request, which then could be used as the identifier when connecting and that why introduce some obfuscated security.
What do you think?
yeah, you can see I did a hacky setTimeout(getDevToolsURL,300)
after the hello
. getting back the UUID over the socket would also be great.
but ultimately if the UUIDs are exposed in any way, its a pretty massive security issue, so it may be better to just leave things wide open and say "Beware: your browser's cookies are totally compromised to whoever can access the server. So, like.. only do this in clean profiles/incognito"
New user workflow
hello
message, the extension will request its/json
for the inspectable targetsOther changes
Demo: