search

borismus / markdown-preview

Enables Chrome to render markdown files as HTML
http://smus.com
217 stars 42 forks source link

Tighter extension permissions #27

Open skytreader opened 11 years ago

skytreader commented 11 years ago

I wonder why the extension needs the permissions (a) access to data on all websites and (b) tabs and browsing activity? I'm not very knowledgeable in making Chrome extensions but I don't see anywhere in the code that needs these permissions. Isn't it that showdown.js is just the markdown parser while markdownify.js "integrates" the parser into Chrome. Aside from allowing access to file URLs I don't see anything else it needs to run.

Granted that nowhere in the code uses the permissions I have issues with, I still think that having too many permissions than necessary is a security issue.

ghost commented 9 years ago

+1 - 'Read and change all your data on the websites you visit' is an incredibly scary permissions request