Helping or Hindering?
Shubham Agarwal
2022Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security11 citationsDOI
Abstract
Browser extensions enhance the functionality of native Web applications on the client side. They provide a rich end-user experience by utilizing feature-rich JavaScript APIs, otherwise inaccessible for native applications. However, prior studies suggest that extensions may degrade the client-side security to execute their operations, such as by altering the DOM, executing untrusted scripts in the applications' context, and performing other security-critical operations for the user.
Topics & Concepts
JavaScriptComputer scienceCross-site scriptingScripting languageContext (archaeology)Client-sideWorld Wide WebComputer securityWeb application securityOperating systemWeb serviceWeb developmentPaleontologyBiologyAdvanced Malware Detection TechniquesWeb Application Security VulnerabilitiesSecurity and Verification in Computing