The Wiert Corner – irregular stream of stuff

Jeroen W. Pluimers on .NET, C#, Delphi, databases, and personal interests

  • My work

  • My badges

  • Twitter Updates

  • My Flickr Stream

  • Pages

  • All categories

  • Enter your email address to subscribe to this blog and receive notifications of new posts by email.

    Join 1,798 other followers

When your browser extensions go rouge…

Posted by jpluimers on 2016/11/21

A while ago I suspected at least one of my Chrome extensions to do funny things.

In the end it appeared that “Live HTTP Headers 1.0.8” went rogue a while ago and has by now been removed from the store as this link is gone: https://chrome.google.com/webstore/detail/iaiioopjkcekapmldfgbebdclcnpgnlo ()

It was part of a much larger set of extensions that went away and isn’t limited to Chrome: other browsers with extension mechanisms suffer from this too. More links about this at the bottom of this post.

Which means that by now you should be really careful which extensions you have installed and enabled.

So, browse through these and ensure you’ve disabled everything you don’t need permanently:

On my system, I removed these:

When you go from Chrome to these URLs through the extensions page, it usually appends an UTM tracker like utm_source to the URL.

So I dug into that as well and found these links explaining them:

References:

What helps is Content Security Policy (CSP):

–jeroen

3 Responses to “When your browser extensions go rouge…”

  1. Lance E Sloan said

    “Rouge”, as in the color or cosmetics? 😉

  2. Lance E Sloan said

    “Rouge”, as in the color or cosmetics? 😉

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

 
%d bloggers like this: