https://github.com/blobbybilb/basic-auth-warning-extension
Displays a warning when you are about to visit a URL that contains basic auth credentials, to help prevent possible phishing attacks.
https://github.com/blobbybilb/basic-auth-warning-extension
Last synced: about 1 year ago
JSON representation
Displays a warning when you are about to visit a URL that contains basic auth credentials, to help prevent possible phishing attacks.
- Host: GitHub
- URL: https://github.com/blobbybilb/basic-auth-warning-extension
- Owner: blobbybilb
- License: gpl-3.0
- Created: 2023-11-07T18:22:11.000Z (over 2 years ago)
- Default Branch: main
- Last Pushed: 2024-02-22T23:59:15.000Z (over 2 years ago)
- Last Synced: 2024-05-30T02:14:40.478Z (about 2 years ago)
- Language: HTML
- Homepage:
- Size: 313 KB
- Stars: 0
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# basic-auth-warning-extension
Displays a warning when you are about to visit a URL that contains basic
auth credentials, to help prevent possible phishing attacks.
Clicking on a link to a URL like
`example.com∕file@something.zip`* would take you to a website with
the domain something.zip, which may not be what you expect, and may
allow an attacker to conduct a phishing attack by imitatiing
example.com. This extension should display a warning when this is
happening, and may help prevent that. Of course, it is not a guarantee,
and you are still responsible for your own security.
*Note that the `∕` char is not the regular slash but a different character that looks like it.
---
**Update:**
The first draft got rejected from the Chrome Webstore for using `["webNavigation", "activeTab", "scripting"]` rather than just webNavigation, but at least in Arc having those two permissions lets it stop the page from loading while the popup is showing (not sure why (didn't investigate)). This means JS from the page could possibly try to interfere with the extension. The chrome webstore version just has the webNavigation permission, but the package from Github Releases has all 3 permissions (not all may be necessary/I might be doing something incorrectly, so feel free to experiment and tell me if you find anything).