buster
buster copied to clipboard
Chromium: Site access permission `On all sites` is too extensive
Is your feature request related to a problem? Please describe.
The site access permission On all sites
of the extension is too extensive and should be restricted.
Describe the solution you'd like
Since the speech services
is limited to a static list, it would make sense to hardcode the site access permisson On specific sites
with pre-defined websites.
The user can then decide, which website should be accessable by the extension.
The following entries are sufficient for the speech service Wit.at (managed)
:
https://api.wit.ai/*
https://wit.ai/*
https://www.google.com/*
You can test them on the Google ReCAPTCHA demo page.
All other specific websites of the other speech services
need to be determined.
Describe alternatives you've considered
The site access permission On click
could be used, but it requires clicking on the extension and reloading the website. This is not user friendly and the extension then has access to any websites.
The Wiki could be used to give the above instrucitons.
Additional context
Buster extension
Hardcoded example: Chromium Web Store