Elaborate on permissions required to use the extension about my-notes HOT 3 CLOSED

Permissions required by the extension:

"permissions": ["storage", "contextMenus", "tabs"],

Location:

What are these permissions needed for:

"storage"

"storage" permission is used to save the notes and options (font size, font type, etc.) to Chrome Storage Local, and to save selection (only in case of Save selection to other devices) to Chrome Storage Sync.

Locations:

• https://github.com/penge/my-notes/blob/318135d693a1155534df287227fae680c7a765f8/notes.js
• https://github.com/penge/my-notes/blob/318135d693a1155534df287227fae680c7a765f8/options.js
• https://github.com/penge/my-notes/blob/318135d693a1155534df287227fae680c7a765f8/background.js

What to look for:

• Anything that starts with chrome.storage.local
• Anything that starts with chrome.storage.sync

"contextMenus"

As the name implies, this permission is used to create a Context menu.

Creating the Context menu:

• my-notes/background.js

  Line 30 in 318135d

  const createContextMenu = () => {

• my-notes/background.js

  Line 86 in 318135d

  createContextMenu();

Handling the Context menu:

• my-notes/background.js

  Line 89 in 318135d

  chrome.contextMenus.onClicked.addListener((info) => {

"tabs"

This permission is used to replace a New Tab with My Notes.

Location:

• my-notes/background.js

  Line 123 in 318135d

  chrome.tabs.update(tab.id, { url: "/notes.html" });

Because of this one line, I suppose:

// https://github.com/penge/my-notes/blob/318135d693a1155534df287227fae680c7a765f8/background.js#L123
chrome.tabs.update(tab.id, { url: "/notes.html" });

Web Store things that the extension has something to do with Browsing history, which is fucking stupid.

from my-notes.

This is really stupid. I am pissed about Web Store as there is no way to test the publication before eventual publication = which means no dev Web Store environment.

The newly added permission is called "tabs". This is defined in manifest.json. This persmission is required to replace a new tab programatically which is defined in background.js, whereas before it was done declaratively in manifest.json.

I can now see by installing it from Web Store that the interpretation really sucks. Not only it is interpreted as It can: Read your Browsing history which is total bullshit but also the review process is zero. There is literally nothing in the code that has something to do with Browsing history.

from my-notes.

imho, to be honest, I would hesitate to install something that has something to do with Browsing history which are usually antivirues, ad blockers, malwares, data and privacy scrapers and that kind of thing

from my-notes.