markdown-preview icon indicating copy to clipboard operation
markdown-preview copied to clipboard

Tighter extension permissions

Open skytreader opened this issue 11 years ago • 1 comments

I wonder why the extension needs the permissions (a) access to data on all websites and (b) tabs and browsing activity? I'm not very knowledgeable in making Chrome extensions but I don't see anywhere in the code that needs these permissions. Isn't it that showdown.js is just the markdown parser while markdownify.js "integrates" the parser into Chrome. Aside from allowing access to file URLs I don't see anything else it needs to run.

Granted that nowhere in the code uses the permissions I have issues with, I still think that having too many permissions than necessary is a security issue.

skytreader avatar Mar 02 '13 16:03 skytreader

+1 - 'Read and change all your data on the websites you visit' is an incredibly scary permissions request

ghost avatar Mar 11 '15 01:03 ghost