Feb 8
Scope of chrome extension permissions
I tend to follow the principle of least privilege. Would it be feasible to restrict the extension to either the active tab or the GitHub domain specifically? This would give users more confidence in the extension's security posture.
Closed
Hey Matthew, thanks for the review. This chrome extension will be going to get re-written on top of new editor since I'm actively working on GitCMS's web app version and it's MCP app version. But fair I'll keep that in mind to only have permission related to GitHub's tab in new chrome extension.