Author Archives: antonio

Browser custom protocol handlers

Posted on January 13, 2017 by antonio

The possibility of running a shell command from an extension (NPAPI) has been phased out, but custom protocol handlers are still supported.

What is the practical difference if an extension can still launch any executable via… Continue reading Browser custom protocol handlers→

Posted in browser extensions, browser-hijacking, sandbox, web browser

Malicious script compromising browser extensions

Posted on January 12, 2017 by antonio

In Firefox or Chrome,
is it possible for a web page script to compromise a user installed extension?
This might involve access to extension private data or obtain the same execution privileges as the compromised extension. … Continue reading Malicious script compromising browser extensions→

Posted in browser extensions, browser-hijacking, web browser

Newer posts →