ATTACKING BROWSER EXTENSIONS

Summary from the TLDR newsletter

Browser extensions are everywhere - it's common for even the average user to have at least one extension installed. Research into browser extension security is mostly scattered around the internet. This post talks about the structure of browser extensions and the vulnerabilities that are present in the ecosystem. It discusses the progression of security in the extension space and highlights attack surfaces and mitigations. The post ends by recommending best practices for ensuring the security of extensions.