Chrome Extension Corrupted and Changed by Malware -


i've got popular chrome extension, on time i've got sporadic reports users extension malware, of course not. i've learned there malware programs change files of chrome extension , make turn malware. there way can defend extension kind of changes?

thanks.

you don't have to!

chrome has built-in mechanism preventing it. extension installed web store have signed hash of files included.

at time when chrome loads extension, hashes checked, , if file modified chrome marks extension potentially compromised, disables , warns user of unauthorized changes.


that said, protects static files have in extension.

if rely on external scripts, it's duty protect them man-in-the-middle attacks. chrome's default extension csp job of securing against worst offenders, still - if use dynamic code, it's responsibility secure it, if override csp.

finally, if you're using native host module, it's not secured. treat untrusted.


Comments

Popular posts from this blog

Receive udp packets in android gstreamer -

php - Extract Text from HTTP referer -

java - Callback from new thread to class from which thread was initiated -