01 - Introduction to Browser Extension Security
Browser extensions are prime targets for attackers because they can read and modify all data on websites the user visits, capture credentials, and man...
02 - Manifest V3 Security and Permissions
MV3 introduces several major security enhancements over MV2:
03 - Content Script and DOM Injection
Content scripts interact directly with the DOM of the web page. If a content script unsafely handles data from the web page (or from background script...
04 - Extension Data Storage and Web Requests
Extensions often need to store user preferences or authentication tokens.
05 - Extension Security Auditing Tools
When analyzing a third-party extension or testing your own, the right tools make a huge difference.
06 - Hands-on Lab: Vulnerable MV3 Extension
In this lab, you'll exploit a DOM XSS vulnerability in a Manifest V3 extension, then fix it.
07 - References
Comprehensive security guide and practical technical implementation handbook.
Browser Extension Security Guide
Browser extensions have significant access to user data, often more than web applications themselves. This guide covers the security architecture of m...