0 Replies
      Latest reply on Dec 20, 2019 7:02 AM by jtayler
      jtayler Level 1 Level 1 (10 points)

        Permissions for Safari extensions seems to allow for only browsing history AND Webpage contents such as passwords and whatever else.


        What if we only need to URL from certain domains?


        Never reading the DOM should allow us to use a less-elevated permission that seems far more reasonable than allowing an extension to read my passwords on the DOM