dnakov / little-rat

🐀 Small chrome extension to monitor (and optionally block) other extensions' network calls
MIT License
2.08k stars 64 forks source link

Feature Requests: Block extensions by default and mitigation in case the Little Rat extension crashes #25

Open SullieLore opened 5 months ago

SullieLore commented 5 months ago

Hi Daniel,

Excellent extension.

When I test out new extensions, I generally block them first with Little Rat to be on the safe side and inspect what the network traffic looks like over time. It would be ideal if your extension blocked all extensions by default, or had an advanced option to "block all newly installed extensions".

Also, sometimes Edge tells me that an extension crashed, and this has also happened to the Little Rat extension. Does this mean the network traffic is being allowed for that brief time of your extension crashing? If so, it would be good to have some mitigations in place to safeguard against that. I'm not certain about how the extension APIs etc. all intersect, but perhaps your extension could push the filters to a host file or even generate manual uBlock Origin rules based on the extensions which are installed.

dnakov commented 5 months ago

Hey Block by default is a good idea, I'll add it. If the extension crashed, specifically the background page, yeah, it probably means it no longer is blocking. There's nothing we can do to block while it's crashed. The same thing goes for uBlock. If that crashes, the rules don't apply. I can't use uBlock origin rules for extensions traffic as far as I know, it's a different permission the last time I looked.