Questions tagged [browser-extension]

Browser extensions are additions to a browser that add to or improve some part of the browser's functionality.

Browser extensions are additions to a browser that add to or improve some part of the browser's functionality.

Consider including browser-specific tags to your question, such as:

680 questions
208
votes
11 answers

How to get started with developing Internet Explorer extensions?

Does anyone here have experience with/in developing IE extensions that can share their knowledge? This would include code samples, or links to good ones, or documentation on the process, or anything. I really want to do this, but I'm hitting a giant…
Alex
  • 64,178
  • 48
  • 151
  • 180
84
votes
3 answers

How to override content security policy while including script in browser JS console?

I was trying to include JQuery on an existing website using console this way: var script = document.createElement('script'); script.src = 'http://code.jquery.com/jquery-1.11.1.min.js'; script.type =…
67
votes
1 answer

How do I import scripts into a service worker using Chrome extension manifest version 3?

I am trying to migrate my chrome extension from manifest version 2 to 3. Now that background scripts are replaced by service workers in manifest v3, I can no longer use a html file and refer js files in script tags. Is there any way I can import my…
66
votes
7 answers

Chrome extension content script re-injection after upgrade or install

After the Chrome extension I'm working on is installed, or upgraded, the content scripts (specified in the manifest) are not re-injected so a page refresh is required to make the extension work. Is there a way to force the scripts to be injected…
54
votes
3 answers

How to use React without unsafe inline JavaScript/CSS code?

Background I have to use a Content Security Policy for a react application. The reason, that is however not of a big matter here, is, that I am creating a WebExtension/Browser Extension/add-on and these do have such a content security policy, and…
38
votes
6 answers

Multiple JS files in Chrome Extension - how to load them?

I've wrote a Chrome Extension. My background.js file is quite large, so I want to split it to smaller parts and load specified methods when required (some kind of lazy-loading). I've done this with Firefox: // ( call for load specified lib ) var…
36
votes
2 answers

Testing browser extensions

I'm going to write bunch of browser extensions (the same functionality for each popular browser). I hope, that some of the code will be shared, but I'm not sure about this yet. For sure some of extensions will use native API. I have not much…
ciembor
  • 7,189
  • 13
  • 59
  • 100
25
votes
2 answers

Manifest v3 background scripts/service worker on Firefox

I'm trying to migrate my browser extension (that I expect to work on Chrome and Firefox) from manifest v2 to v3. However, I am getting conflicting information about the background section. I did lots of research on google and stack overflow, and no…
25
votes
0 answers

How to run a modern userscript on Internet Explorer?

I've found it's pretty easy to take a Greasemonkey-type userscript and turn it into extensions/addons for Chrome, Safari, and Firefox. And of course one can run them natively in Chrome, and simply in Firefox using the Greasemonkey addon. I'm now…
mix
  • 6,943
  • 15
  • 61
  • 90
21
votes
3 answers

Secure OAuth in Javascript

I have an api which uses OAuth 1.0a to authenticate applications using it. It's replacing an old api which used a number of custom built and hodge-podge calls which are being deprecated. It's well known that OAuth 1.0a is not secure in (client-side)…
Chris Salij
  • 3,096
  • 5
  • 26
  • 43
21
votes
1 answer

Content Security Policy for extensions and bookmarklets

Github has the following Content Security Policy: Content-Security-Policy:default-src *; script-src assets-cdn.github.com www.google-analytics.com collector-cdn.github.com; object-src assets-cdn.github.com; style-src 'self' 'unsafe-inline'…
18
votes
1 answer

Debugging binary websockets frames

Packet analyzers like Wireshark, and Fiddler allows for low-level packet dump, and appears to be the recommended way to debug binary websocket frames. Major problems of this approach includes secure websocket layers, complexity, friction in the…
Silver Dragon
  • 5,480
  • 6
  • 41
  • 73
18
votes
1 answer

How to develop custom filters for the Imagus hover zoom extension?

After I read about Hover Zoom being evil (yikes!), two articles made me instantly switch to another one, called Imagus: Hoverzoom’s Malware controversy, and Imagus alternative - ghacks.net Imagus is a Hover Zoom Replacement to Enlarge Images on…
Camilo Martin
  • 37,236
  • 20
  • 111
  • 154
18
votes
2 answers

Spoof or disable the Page Visibility API

The Page Visibility API starts to be commonly used to pause mandatory video advertisements when the tab is not in focus. This means you need to be watching the ad, if you switch tab or even have another app or menu covering the browser the ad will…
aberaud
  • 909
  • 1
  • 11
  • 24
17
votes
5 answers

What might be shufflling my query string parameters constructed in JavaScript?

So this might be a long, long shot, yet I am completely stumped on what might be causing this issue: I am delivering a client side JavaScript, that parses certain parameters on the page where it is embedded, uses these parameters to construct a URL…
m90
  • 11,434
  • 13
  • 62
  • 112
1
2 3
45 46