search

ghostery / ghostery-extension

Ghostery Browser Extension for Firefox, Chrome, Opera, Edge and Safari
Mozilla Public License 2.0
1.38k stars 141 forks source link

Cannot Trust extension pages #1661

Closed chrmod closed 4 months ago

chrmod commented 5 months ago

Ghostery can block requests done by the extension pages, when this happens users should be able to prevent this situation but Trusting the page

Screenshot from Zoom extension
Screenshot 2024-06-13 at 11 53 23

smalluban commented 4 months ago

After the investigation, it looks like it is a Chrome bug - https://github.com/w3c/webextensions/issues/369 - the DNR rules leak and block requests from other extensions.

Extensions cannot access the context of each other - I tested chrome.webRequest and chrome.webNavigation APIs - there is no way to get events from pages from other extensions. Also, it is not possible to inject content scripts, etc.

For now, we decided to not change the behavior of the panel, as it may add even more confusion to the users. For example, they may think then that extension runs for other extensions.