Rogue websites can turn vulnerable browser extensions into back doors

A researcher has found that websites can use some extensions to bypass security policies, execute code, and even install other extensions.

This post appeared first on Naked Security Blog by Sophos
Author: John E Dunn