• Login
    • Search
    • Categories
    • Recent
    • Tags
    • Users
    • Groups
    • Rules
    • Help

    Do more on the web, with a fast and secure browser!

    Download Opera browser with:

    • built-in ad blocker
    • battery saver
    • free VPN
    Download Opera

    Via message passing, extensions let web applications get access to sensitive pr

    Opera for computers
    extensions addons message passing communications with webpages
    4
    19
    6715
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • doliere
      doliere @leocg last edited by

      @leocg No I did not.
      I checked my mails

      Reply Quote 0
        leocg 1 Reply Last reply
      • leocg
        leocg Moderator Volunteer @doliere last edited by

        And did you provide one when you made the report?

        Do you remember the title or any detail of the report?

        Reply Quote 0
          doliere 1 Reply Last reply
        • doliere
          doliere @leocg last edited by

          @leocg No I did not !
          I do not remember the exact title of the report, but it is related to extensions that can be exploited by web pages via message passing to get access to privileged extensions API.
          So maybe
          "Exploiting extensions capabilities via message passing"

          OR

          "Extensions that let scripts in webpages post messages to the extensions in order to bypass SOP, execute arbitrary code in the context of the extension, trigger downloads, read and write extensions storage"

          OR

          "Via message passing, extensions let web applications get access to sensitive privileged capabilities"

          Reply Quote 0
            leocg 1 Reply Last reply
          • leocg
            leocg Moderator Volunteer @doliere last edited by

            So that's why you didn't get a confirmation message with the bug id.

            Reply Quote 0
              doliere 1 Reply Last reply
            • doliere
              doliere @leocg last edited by

              @leocg Ok I see
              What to do now ?

              Reply Quote 0
                leocg 1 Reply Last reply
              • leocg
                leocg Moderator Volunteer @doliere last edited by

                Nothing. By the way, it seems that the extension you mentioned in the first post was removed.

                Reply Quote 0
                  doliere 1 Reply Last reply
                • doliere
                  doliere @leocg last edited by

                  @leocg Yes it has been removed. But I have some more to report, can I do it here ?

                  Reply Quote 0
                    leocg 1 Reply Last reply
                  • leocg
                    leocg Moderator Volunteer @doliere last edited by

                    You can post here in the forums for reference but it would be better to use https://security.opera.com/report-security-issue/

                    Choose web service or website and mention addons.opera.com

                    Reply Quote 0
                      doliere 2 Replies Last reply
                    • doliere
                      doliere @leocg last edited by

                      @leocg Ok thanks. I found that most of the extensions I reported have been removed. But I reported some other 4 that are still on the Opera addons page. Thanks for your highly useful help

                      Reply Quote 0
                        1 Reply Last reply
                      • doliere
                        doliere @leocg last edited by

                        @leocg Do you think that Opera should do something, during extensions review process, in order to remove extensions that can be exploited via message passing ?

                        Reply Quote 0
                          tnowak 1 Reply Last reply
                        • tnowak
                          tnowak Opera @doliere last edited by

                          @doliere Currently the best way to report problems with extensions is through their respective pages.
                          There's a "Reported issues" button on each.

                          For general issues and ideas please use https://security.opera.com/report-security-issue/ --> "Web Service or website" --> "addons.opera.com".

                          Thanks for reporting these!

                          Reply Quote 0
                            doliere 1 Reply Last reply
                          • doliere
                            doliere @tnowak last edited by

                            @tnowak This issue has been addressed ! I note your comment for future reports

                            Reply Quote 1
                              1 Reply Last reply
                            • First post
                              Last post

                            Computer browsers

                            • Opera for Windows
                            • Opera for Mac
                            • Opera for Linux
                            • Opera beta version
                            • Opera USB

                            Mobile browsers

                            • Opera for Android
                            • Opera Mini
                            • Opera Touch
                            • Opera for basic phones

                            • Add-ons
                            • Opera account
                            • Wallpapers
                            • Opera Ads

                            • Help & support
                            • Opera blogs
                            • Opera forums
                            • Dev.Opera

                            • Security
                            • Privacy
                            • Cookies Policy
                            • EULA
                            • Terms of Service

                            • About Opera
                            • Press info
                            • Jobs
                            • Investors
                            • Become a partner
                            • Contact us

                            Follow Opera

                            • Opera - Facebook
                            • Opera - Twitter
                            • Opera - YouTube
                            • Opera - LinkedIn
                            • Opera - Instagram

                            © Opera Software 1995-