Security12 min
XSS Prevention in Chrome Extensions
A security deep-dive into XSS attack vectors specific to Chrome extensions, with practical prevention techniques for popups, content scripts, and background workers.
Tag archive
#security
Every post tagged security, collected into one searchable archive page.
Security14 min
Chrome Extension Security Audit Checklist
A comprehensive security audit framework for Chrome extensions covering CSP, permissions, input validation, storage, network security, and third-party dependencies.
Compliance16 min
Manifest V3 Permissions: Best Practices
Best practices for requesting and managing permissions in Manifest V3 Chrome extensions. Covers required vs optional permissions, host permissions, and review implications.