Matthew Bryant

I'm fairly certain it should, let me know if this is not the case though.

What was the reasoning for removing the `disney.com` example from the README?

This should be fixed with https://github.com/mandatoryprogrammer/CursedChrome/pull/44 - can one of you confirm?

It would still be able to access its own origin (e.g. `chrome-extension://randomextid`, all extensions can with zero permissions declared), and I'm not sure there is a meaningful distinction here. Not...

The file you changed doesn't go on the hacked server - that's the C&C module. I like the change but it should be to the shell.php file

I don't know how to fix this one. I fixed it in my own code by doing an initial `JSON.parse` of the input JSON inside of a `try/catch` and returning...

Are you sure that this message hasn't been shown previously? (It's only shown once). If you clear the postgres database it'll show the message again.

Not a bad idea honestly, will look into rolling thing in. Formatting will be tricky though.

Sure, feel free to create a PR and I can merge it.

After doing a bunch of research into this I think the best route would be to create an iframe with a bunch of elements such as ``, ``, ``, with...