搜索 | 用户支持

防范以用户支持为名的诈骗。我们绝对不会要求您拨打电话或发送短信,及提供任何个人信息。请使用“举报滥用”选项报告涉及违规的行为。

详细了解

Add-on Permission in detail

  • 3 个回答
  • 1 人有此问题
  • 1 次查看
  • 最后回复者为 wmchung9

more options

Hi, I am a bit of a panaroid person, so regarding to the permission: "access my data for all websites", does that means an add-on has the ability to make input in the background by itself? For example, whether an add-on is able to control my account on a website, changing the settings, password, and etc?

Hi, I am a bit of a panaroid person, so regarding to the permission: "access my data for all websites", does that means an add-on has the ability to make input in the background by itself? For example, whether an add-on is able to control my account on a website, changing the settings, password, and etc?
已附加屏幕截图

由wmchung9于修改

被采纳的解决方案

Eddie said

Hi, I am a bit of a panaroid person, so regarding to the permission: "access my data for all websites", does that means an add-on has the ability to make input in the background by itself? For example, whether an add-on is able to control my account on a website, changing the settings, password, and etc?

In theory, it's possible, if you are logged in to the site and the site's forms can be manipulated by a script. Many sites have protections against scripts taking high-risk actions, or require additional verification for those actions.

If you want to browse critical sites without your extensions being active, you could use a private window for those sites and make sure the extensions do not have permission to run in private windows. See: Extensions in Private Browsing.

定位到答案原位置 👍 1

所有回复 (3)

more options

The developer explains the purpose behind each required permission here. https://github.com/gorhill/uBlock/wiki/Permissions

  • Access your data on all web sites
  • Since first version.
  • - To be able to inspect all net requests so that they can be cancelled if needed.
  • - Only on http- and https-based URL addresses.
more options

选择的解决方案

Eddie said

Hi, I am a bit of a panaroid person, so regarding to the permission: "access my data for all websites", does that means an add-on has the ability to make input in the background by itself? For example, whether an add-on is able to control my account on a website, changing the settings, password, and etc?

In theory, it's possible, if you are logged in to the site and the site's forms can be manipulated by a script. Many sites have protections against scripts taking high-risk actions, or require additional verification for those actions.

If you want to browse critical sites without your extensions being active, you could use a private window for those sites and make sure the extensions do not have permission to run in private windows. See: Extensions in Private Browsing.

more options

jscher2000 said

Eddie said

Hi, I am a bit of a panaroid person, so regarding to the permission: "access my data for all websites", does that means an add-on has the ability to make input in the background by itself? For example, whether an add-on is able to control my account on a website, changing the settings, password, and etc?

In theory, it's possible, if you are logged in to the site and the site's forms can be manipulated by a script. Many sites have protections against scripts taking high-risk actions, or require additional verification for those actions.

If you want to browse critical sites without your extensions being active, you could use a private window for those sites and make sure the extensions do not have permission to run in private windows. See: Extensions in Private Browsing.

Got it, so if I want to be safe, I can turn off the extension when logging into my accounts, thanks!