markdown-here icon indicating copy to clipboard operation
markdown-here copied to clipboard

Reduce permissions scope

Open evictor opened this issue 2 years ago • 1 comments

There is no need for this plugin to "read and change data on all [a user's visited] web sites." At the very least, it should be limited to the web sites it supports, which if I'm not mistaken is a half dozen or so known domains.

evictor avatar Jul 30 '23 04:07 evictor

Except that MDH works in a surprising number (and variable number) of places, so it's not possible to enumerate them. See: https://github.com/adam-p/markdown-here/wiki/Compatibility

However, I keep meaning to look into whether there's some mechanism where the extension can request permissions to a site when the user clicks the button. It's not like MDH needs access before then. So I'm leaving this issue open.

adam-p avatar Nov 10 '24 12:11 adam-p

The permission scope has been reduced down to approximately nothing. It only takes gets permission to act when you activate MDH (button, hotkey, context menu). The change will be in the next release.

See: e00d005299922198aef968e0cd42b275525c20a6

adam-p avatar Jul 10 '25 01:07 adam-p