I’m not sure whether there is anything but SquareX PR to this story: globenewswire.com/news-release…
Either way: yes, malicious browser extensions can still do considerable damage, even with Manifest V3. No amount of technical improvements is going to change that: as long as extensions can do something useful, they will also be able to turn rogue.
Manifest V3 implemented some rather effective measures to prevent legitimate extensions from being exploited. It also to some degree made it easier to inspect extensions and identify problematic use of browser APIs.
But, and I doubt that it comes as much of a surprise, it’s still very bad to have malicious extensions installed. No real changes here.
Darrell Bowles
in reply to Tamas G • • •