markdown-preview
markdown-preview copied to clipboard
Tighter extension permissions
I wonder why the extension needs the permissions (a) access to data on all websites and (b) tabs and browsing activity? I'm not very knowledgeable in making Chrome extensions but I don't see anywhere in the code that needs these permissions. Isn't it that showdown.js
is just the markdown parser while markdownify.js
"integrates" the parser into Chrome. Aside from allowing access to file URLs I don't see anything else it needs to run.
Granted that nowhere in the code uses the permissions I have issues with, I still think that having too many permissions than necessary is a security issue.
+1 - 'Read and change all your data on the websites you visit' is an incredibly scary permissions request