A cookie notice that seeks permission to share your details with “848 of our partners” and “actively scan device details for identification”.

  • Petter1@lemm.ee
    link
    fedilink
    arrow-up
    3
    ·
    1 month ago

    Yea, every extension has full access to any website, if you not make use of a whitelist/blacklist.

    • Void Vortex@lemmy.ml
      link
      fedilink
      arrow-up
      2
      arrow-down
      1
      ·
      1 month ago

      Some extensions, such as SponsorBlock for YouTube actually limit themselves so they can only operate when the browser is on youtube.com. This can be declared in the extension manifest. It’s a separate permission to access data on all web sites vs. access data on a specific website.

      • xthexder@l.sw0.com
        link
        fedilink
        arrow-up
        2
        ·
        1 month ago

        Not helpful when something like Consent-o-matic needs to operate on every possible website with a cookie banner.

        I have had the same concerns, since watching it click through things faster than I can see is scary. Maybe some day someone sneaks in a cookie banner detector that activates on banking pages to steal your money? uBlock Origin has similar risks, but at least it’s not actively controlling browser inputs.