search

yois615 / OS-Image-Filter

Chrom extension to filter human skin in images of websites
https://chrome.google.com/webstore/detail/skin-tone-image-filter/olmgdlhfhakafgkfibdbkofbiakfombk
0 stars 0 forks source link

[SECURITY] XSS injection possibility #1

Open yois615 opened 1 year ago

yois615 commented 1 year ago

At this line: https://github.com/yois615/OS-Image-Filter/blob/master/src/js/background.js#L143

We fetch an arbitrary URL. This needs to be better thought out. https://developer.chrome.com/docs/extensions/mv3/network-requests/#xhr-vs-content-scripts

yois615 commented 1 year ago

https://stackoverflow.com/questions/22165414/access-to-image-and-video-data-from-browser-extension-vs-cors