auchenberg / devtools-remote

Debug your browser tabs remotely via Chrome DevTools
https://remote.devtools.rocks
MIT License
686 stars 40 forks source link

refactor chrome extension #1

Closed paulirish closed 8 years ago

paulirish commented 8 years ago

New user workflow

mistycolorfulanaconda

auchenberg commented 8 years ago

Love it!

It was actually thinking of doing this, but changing the API to generate a UUID in the connect hello request, which then could be used as the identifier when connecting and that why introduce some obfuscated security.

What do you think?

paulirish commented 8 years ago

yeah, you can see I did a hacky setTimeout(getDevToolsURL,300) after the hello. getting back the UUID over the socket would also be great.

but ultimately if the UUIDs are exposed in any way, its a pretty massive security issue, so it may be better to just leave things wide open and say "Beware: your browser's cookies are totally compromised to whoever can access the server. So, like.. only do this in clean profiles/incognito"