axoletl / not-br-ext

Extension implementation of not-br
MIT License
36 stars 4 forks source link

Request: release as TamperMonkey script as well #1

Open DeflateAwning opened 2 years ago

DeflateAwning commented 2 years ago

It would be great if this could be released as a TamperMonkey script as well. Giving a plugin full edit access to all websites I visit is something I don't do lightly, and I certainly won't do that when this extension is released on the Chrome Extension Store.

It would be great if you could release this as a TamperMonkey script, because that allows people to verify the exact code being run in their browser as they load the plugin into the browser. It also supports cross-browser usage (i.e., not just in Chrome) for all those Firefox users out there.

axoletl commented 2 years ago

open to making as a tampermonkey script! though i will be making a firefox extension (its my browser) for ease of installation and the code will be verifiable on this repo by people who care anyway

DeflateAwning commented 2 years ago

and the code will be verifiable on this repo by people who care anyway

The issue is that there is no verifiable proof that the code you upload to the Extension web stores is the same code that is in this repo. You could have perfectly fine code here, but upload malicious code to the web stores/extension repositories.

TamperMonkey is good in that regard, because it loads the code directly from the Git repo, instead of through a blackbox Chrome/Firefox system.

axoletl commented 2 years ago

thats a fair enough point, ill look into this after refining the core script but the work will probably still be put under the main extensions development