yorkxin / copy-as-markdown

A browser extension to copy tabs and links as Markdown
MIT License
546 stars 83 forks source link

Reduce permissions #148

Closed yorkxin closed 4 months ago

yorkxin commented 5 months ago

Summary

After released #123 , I observed many uninstall events on Chrome Web Store. Some users reported that they are prompted for "accessing browsing history" permission, and believing this extension is doing something bad.

For context, the permission warning is from tabs permission, which has been there for a very long time. The permission warning was triggered because an additional tabGroups permission was requested as required.

Regardless, it is a best practice to not ask for too many permissions so that we don't scare users unnecessarily. When implementing Bookmarks integration #146 , I made bookmarks an optional feature, so that the user can have more control about what data to expose to the extension.

ezzatron commented 4 months ago

Hey, I just got this scary-looking request from version 24.6.30:

Screenshot 2024-07-02 at 17 21 16

I didn't really expect that this extension would need write permissions of any kind, so it definitely made me want to double-check what's going on.

yorkxin commented 4 months ago

@ezzatron Hi, thanks for sharing, this is definitely scaring. However I don't find the version number match the one I have released. The current latest version is 3.0.0 on Chrome. Could you take a screenshot of Extensions page on Chrome? Thanks.

yorkxin commented 4 months ago

@ezzatron Hi, I think you are talking about this extension: https://github.com/notlmn/copy-as-markdown

It just happened to have the same name as my extension. Please kindly contact their developer for your concern. Thanks!

ezzatron commented 4 months ago

Ah, sorry. My mistake!