Uitbreiding vraagt meer rechten dan haar functie
Een uitbreiding claimt toegang tot alle paginas terwijl de functie die zij beschrijft over een handvol sites gaat.
- Familie
- Gegevens
- Status
- actief
- Geldt voor
- web, desktop
Wat er gebeurt
An extension declares in its package which hosts it may read and change and which interfaces it may use. That declaration is what the browser enforces; the description in the listing is what the person reads. Where the declaration covers every host, or browsing history, or the contents of all pages, while the described function operates on a named handful of sites, the extension can read everything the person does in the browser, including what sits behind a login, because it runs inside the session.
Waarom het ertoe doet
An extension sits where no website reaches: after decryption, inside the account, on every tab. Access granted once persists silently across updates, and an extension can change owner without asking again. The person granted it for a function and cannot see what is read, because reading leaves no trace.
Veelvoorkomende oorzaken
- a broad host pattern declared during development and never narrowed
- one permission set covering several features, including ones this person never uses
- a bundled library requiring a permission the extension itself does not need
- an extension sold or transferred, keeping the permissions it already had
Dit is het níet
A page reading device characteristics is Device fingerprinting. A component inside an application that collects on its own account is Bundled component collection, which is established from observed traffic. This entry is about declared access, which exists whether or not anything has been sent yet.
Hoe je het vaststelt
Indicator
The permission declaration in the published package covers hosts beyond those the listing describes the function as operating on: a pattern matching every host, or access to browsing history or to the contents of all pages, set against a description naming a bounded set. Both documents belong to the publisher; the researcher only does the set comparison.
Methode
static-source
Kwaliteit van de detectie
90 van 100
De grenzen van deze bevinding
Wat dit patroon zou weerleggen
- The described function does operate on every site.met de hand te toetsende bevinding vervalt
- The broad access is requested at runtime, when the person uses the extension on a site, and can be refused per site.met de hand te toetsende bevinding vervalt
- The listing describes the broader function plainly, on the screen where the person installs it.met de hand te toetsende bevinding wordt zwakker
- The declaration is broad and the shipped code demonstrably operates on the named hosts only.met de hand te toetsende bevinding wordt zwakkerThe access still exists and survives every update. The finding is about what is granted, and it is worth saying that the current release does not use it.
Wat dit patroon níet vaststelt
- harm; the catalogue standardises a finding so it can be referred to, it does not weigh it
- severity; there is no score here, by design. Weighing belongs to whoever applies the entry to a concrete case
- unlawfulness; that is for a supervisory authority or a court
- intent; a fault is usually a build decision, not a plan
- absence: not finding it in one capture is not evidence that it is not there
Reproduceren
- manual
METHOD.mdno dedicated reproduction exists yet; follow the general method and the indicator above
Juridisch kader
Bepalingen
Veelgehoorde tegenwerpingen
The browser shows the permissions at install.
Once, in a sentence, next to a description that says something else. The comparison between those two is exactly the finding.
We do not use the access we have.
Access is what can be checked; use is not, and it changes with every release without anyone being asked again.
Every extension asks for this.
That is a statement about the ecosystem, not about necessity. A narrower pattern is available in the same interface and costs one line.
The store reviewed and approved it.
A review checks the package against the store's rules. It does not establish that the access is necessary for the function the person installed it for.
Geldt wanneer
to-processing