search

brave / brave-browser

Brave browser for Android, iOS, Linux, macOS, Windows.
https://brave.com
Mozilla Public License 2.0
17.91k stars 2.34k forks source link

Incorporate Shields ad & tracker blocking for extensions #2270

Open tildelowengrimm opened 5 years ago

tildelowengrimm commented 5 years ago

It would be pretty neat to block requests from extensions to known trackers.

qpongo commented 5 years ago

+1 Yes, this could be a unique feature where Brave again innovates.

From https://community.brave.com/t/fr-shields-up-on-extensions-protect-from-spying-malicious-extensions

I :heart: Brave and how it protects my privacy but extensions are big security hole.

Can we extend the Brave Shields UP concept to requests from extension background scripts?

Users could view the tracking that their favorite extension does and could then actively choose Shields DOWN on that extension if they still wanted it and if the extension wouldn’t work without violating the user’s privacy.

Even back with Muon I noticed one of the approved extensions sent detected Facebook login information and a Google Analytics cookie back to their servers but now that the entire chrome web store is allowed (A GOOD THING) this opens up a blatantly open back door.

Zefferis commented 3 years ago

Gonna do a revival on this issue;

I'm currently using bitwarden's browser extension as my password manager and it's unable to work on sites that I've blocked javascript on; the site's use of javascript and my extensions use of javascript are different; so they should also have unique blocking rules and exceptions.

It's a tad annoying having to enable javascript on a whole site so I can use my password manager.

Though I'm not some tech expert so if my understanding of javascript blocking is incorrect then ignore this.