Gregory's Server
@simon Not knowing how '*' is implemented, I'm concerned that it might it used on other websites matching `*.google.com`, such as https://my.malevolence.site/.google.com.
|
3 comments
@xgebi The format used in the extensions system specifically checks against the hostname. The source code is here: https://source.chromium.org/chromium/chromium/src/+/main:third_party/blink/renderer/core/url_pattern/url_pattern.h;l=26?q=URLPattern&sq=&ss=chromium%2Fchromium%2Fsrc |
@xgebi @simon usually extension permissions only affext the host name, so everything before the first /