←back to thread

1034 points deryilz | 1 comments | | HN request time: 0.324s | source
Show context
krackers ◴[] No.44544544[source]
>They decided it wasn't a security issue, and honestly, I agree, because it didn't give extensions access to data they didn't already have.

So they admit that MV3 isn't actually any more secure than MV2?

replies(4): >>44544732 #>>44547024 #>>44548392 #>>44548589 #
1. bapak ◴[] No.44547024[source]
The only security change is a policy one that did not need to be bundled with the rest: you can't load external code and run it in a privileged context like the background worker. However you can still load it into a frame and communicate with it.