Web application vulnerabilities in context of browser extensions

Intro:
Current days Google Chrome web browser becomes more and more popular. It is really fast, easy-to-use and in same time powerful browser. I will not write about whole security architecture of Chrome. There is a good article about it by Larry Seltzer called "Google's Chrome Extensions Show Security Focus". Let's focus our attention on Chrome extensions platform. Like Mozilla Firefox Chrome supports extensions or addons, which makes your web surfing with it more comfortable.

What are extensions in Google Chrome browser? Extensions are small software programs that can modify and enhance the functionality of the Chrome browser. Developers writes them using well-know web technologies such as HTML, JavaScript (including HTML5 features) and CSS. Using of such technologies of course makes developing ease. But what security risks they will bring to us?

Download: PDF