The Chrome Crusader

The Chrome Crusader

Explore the world of Chrome extension security in this BSidesLV conference talk. Delve into the Chrome Crusader's journey as Lily Chalupowski shares insights on making Chrome extensions more secure. Learn about JSON files, Chroma Optimizer, hidden icons, and CORS limitations. Discover the potential for creating botnets and classic malware through Chrome extensions. Examine the Chrome Extension Architecture, security headers, and Google's security considerations. Investigate the removal of XSS protection and the implementation of Chrome Site Isolation. Gain valuable knowledge about WebRTC and HSTS while addressing both technical and non-technical aspects of Chrome extension security.