firefox extension security issue

Posted by rep_movsd on Stack Overflow See other posts from Stack Overflow or by rep_movsd
Published on 2010-03-14T16:19:28Z Indexed on 2010/03/14 16:25 UTC
Read the original article Hit count: 507

Filed under:

firefox-addon

|

security

|

firefox-extension

I'm writing a firefox addon that logs certain user activity and displays some statistics on a webpage.

When the page is opened, the page sends an event to the addon. The addon adds data to the page and sends an event back, and the page refreshes the statistics.

Now how do I ensure that the extension only puts the (sensitive) data on the right page and not some other malicious one?

Thanks V

© Stack Overflow or respective owner

Related posts about firefox-addon

Firefox-Addon: Restart and save all current tabs and windows

as seen on Stack Overflow - Search for 'Stack Overflow'
Hello guys / gals, First off, this is my first attempt at writing an add-on. That being said, I am attempting to write an add-on that makes some configuration changes and needs to restart Firefox in order to have the changes take effect. I am currently restarting Firefox using the following code: … >>> More
Firefox addon (for firefox 3.5) to monitor web usage

as seen on Super User - Search for 'Super User'
I am looking for a firefox addon that would tell me where I have spent how much time browsing. I came across quite a few addons but they are either not supported in 3.5 or they are no longer supported or cannot be installed. I work on ubuntu linux (9.04) and Shiretoko (Firefox 3.5). I need a solution… >>> More
Firefox addon which is basically just the bookmark button portion of the Google Toolbar

as seen on Super User - Search for 'Super User'
Like the title says, I'm looking for a Firefox add-on that implements a Google Bookmarks toolbar button like the one from Google toolbar. Not a sidebar, not another menu on the menubar -- just a star-shaped toolbar button that brings down a list of tags + untagged bookmarks. >>> More
Firefox-Addon Dialog-like in WinForms?

as seen on Stack Overflow - Search for 'Stack Overflow'
Does anybody know how to make a dialog that looks a bit like the firefox-addon dialog. especially the list/gridview style... I'm using WinForms with C# >>> More
firefox addon security question

as seen on Stack Overflow - Search for 'Stack Overflow'
I'm writing a firefox extension that logs some data and displays the result on a webpage... The webpage fires an event that the extension listens for and the extension can then add data to the page and fire an event back to the page to make it update itself. How do I ensure that the extension always… >>> More

Related posts about security

sudo apt-get update errors

as seen on Ask Ubuntu - Search for 'Ask Ubuntu'
Here is what I get on my terminal when running sudo apt-get update errors. I dont know if the issue is from my sources.list or my proxy setup(have not made any changes to proxies). Thank you for any help in advanced. Ign http://security.ubuntu.com oneiric-security Release.gpg Ign http://security… >>> More
The Security-Developer Gap: Why IT Security Can't Fix Your Security Problems Alone

as seen on Devx - Search for 'Devx'
Two well-known white hats explain how hackers take advantage of security holes left by enterprise application developers. >>> More
The Security-Developer Gap: Why IT Security Can't Fix Your Security Problems Alone

as seen on Internet.com - Search for 'Internet.com'
Two well-known white hats explain how hackers take advantage of security holes left by enterprise application developers. >>> More
StackOverFlowError while creating Mac object on AS400/Java

as seen on Stack Overflow - Search for 'Stack Overflow'
Hello all, I am a newbie to AS400-Java programming. I am trying to create my first program to test the implementation of Message Authentication Code (MAC). I am trying to use the HMACSHA1 hash function. My (Java 1.4) program runs fine on a dev box (V5R4).But fails terribly on the QA box (V5R3). My… >>> More
Google App Engine - Spring Security Issue (java.security.AccessControlException)

as seen on Stack Overflow - Search for 'Stack Overflow'
I'm currently getting the AccessControlException below when I deploy to app engine (I don't see it when I run in my local environment). I'm using GAE 1.3.1, Spring 3.0.1, and Spring Security 3.0.2. Any ideas how to get around this issue? It appears to be an issue with Spring Security trying to get… >>> More