search

beaufortfrancois / spotify-hotkeys-chrome-extension

Spotify Web Player Hotkeys Chrome Extension
https://chrome.google.com/webstore/detail/kimlaecdbfehihbiieeaeelbdkahophn
95 stars 29 forks source link

Overbroad permissions to https://*.spotify.com/* #12

Closed fredcadete closed 7 years ago

fredcadete commented 7 years ago

10 , supporting open.spotify.com (thanks a lot BTW) asks for permissions to all sites under spotify.com. Chrome is giving a notification of this upon update.

This is very broad. I suppose it would allow the extension to view my payment info, which is managed under www.spotify.com

Any chance that it can be changed to play.spotify.com|open.spotify.com or something similar?

beaufortfrancois commented 7 years ago

You're absolutely right. Let me fix that!

beaufortfrancois commented 7 years ago

I've just fixed that in https://github.com/beaufortfrancois/spotify-hotkeys-chrome-extension/commit/c06f8ac765042945c32eff2ed2ac1ba2a054c370 and pushed an update to https://chrome.google.com/webstore/detail/kimlaecdbfehihbiieeaeelbdkahophn