Permission now requires "read and change all your data on all websites"?

[zizhengwu]

Describe the bug The latest version requires "read and change all your data on all websites"

Desktop (please complete the following information):

• OS: Windows
• Browser Chrome
• ChatHub Version [you can find it in ChatHub Settings]

Is this a recent permission change? This feels overly wide compared with before?

Before:

[wong2]

Yes, we changed the permission requirements for the following reasons:

1. The websites we rely on may sometimes change their domain names, such as from bard.google.com to gemini.google.com, from chat.openai.com to chatgpt.com. It would be a hassle if every change led to the ChatHub extension being disabled by Chrome.
2. We rely on many third-party websites, and now many of them are implemented through optional permissions, requiring users to click through permission confirmations multiple times, which is not a great experience.

Therefore, after referencing other AI extension products such as Monica, Sider.ai, etc., we changed to request broader permissions similar to theirs.

[WoodAsh2501]

Having full access to data may let users worried, even worse than clicking permissions. Is there a better way?

[oDisMal]

Having full access to data may let users worried, even worse than clicking permissions. Is there a better way?

I agree it is worrisome. I just paid for ChatHub Premium and now this sudden change is disappointing. I would be less worried if this project was fully opensource, but it seems the devs have close sourced it a while back. I will likely use a different extension now.

[tomups]

I will also stop using this extension due to the extended permissions. A shame.

[tomups]

Actually after more research, it seems an extension can be forced to be limited to only specific sites even if at first it requests access to any site.

You can go to the extension settings and change site access to "Specific sites" and add sites manually. I have done so for the models that I want to use and it works fine.

[dkmin]

We hope to see good results so that we can confidently recommend ChatHub extention to those around us. https://www.producthunt.com/posts/chathub

[SeanBannister]

@wong2 Considering @tomups post would you consider maintaining a list of all the domains required for chathub to work? I also don't feel comfortable allowing extensions to access every site I visit. If a malicious actor gains access to one of those extensions they can basically access every users banking.

[small-luck2367]

Gave permission to these domains, it seems to work for ChatGPT, Gemini, Claude, Copilot (free web access). Perplexity and Meta are not working.

*://anthropic.com/*
*://api.anthropic.com/*
*://api.openai.com/*
*://chatgpt.com/*
*://claude.ai/*
*://copilot.microsoft.com/*
*://gemini.google.com/*
*://meta.ai/*
*://openai.com/*
*://perplexity.ai/*