-
Notifications
You must be signed in to change notification settings - Fork 75
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Find a generic way to disable extensions on security critical websites (e.g. banks) #2
Labels
Comments
karlicoss
added
help wanted
security
Security/privacy critical things
enhancement
New feature or request
and removed
help wanted
labels
Jul 14, 2019
Open
adblock lists could be helpful? |
karlicoss
changed the title
Find a way to disable extensions on security critical websites (e.g. banks)
Find a generic way to disable extensions on security critical websites (e.g. banks)
May 25, 2020
I've gone with couple of builtin shallalist filters https://github.com/karlicoss/promnesia/tree/master/extension/shallalist But would be nice to
|
I guess this is pretty much done here.. #156 Just need to add a disclaimer to readme about what data is send to the (user-running, ideally local, but still!) backend and when. |
karlicoss
added a commit
that referenced
this issue
Nov 22, 2020
karlicoss
added a commit
that referenced
this issue
Nov 22, 2020
karlicoss
added a commit
that referenced
this issue
Nov 23, 2020
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Since extension is sending urls to the backend, it's potentially not secure to do so on websites like banks. While extension supports blacklisting it's not really great to rely on user to do so.
Perhaps some of these lists https://github.com/cbuijs/shallalist would be a good start, unclear how often is it updated though.
Also need to add a UI explanation if the link is blacklisted; and an option to whitelist urls from the 'default' lists in case user really really wants it.
The text was updated successfully, but these errors were encountered: