English
See more
Prevent cookies from being client-side sent cross-origin.
Latest Version
Version
0.42
Update
July 4, 2016
Size
9.58KiB
Developer
Category
Users
459 
Rating
5 ★
Manifest Version
2
Web Store Status
Extension ID
Languages Support
Permissions
WebRequest
WebRequestBlocking
Tabs
WebNavigation
See more
WebRequestBlocking
Tabs
WebNavigation
No-CSRF Extension
Cross-Site Request Forgery is a major problem when it comes to browsing the web. If an attacker were to craft a request toward a server that performs an action, the request would contain any identifying cookies you have. As pointed out in academic literature, this can be used to empty bank accounts, change passwords, or anything in between.
This extension attempts to prevent Cross-Site Request Forgery by stripping cookies from any (non-GET) request that does not follow the same-origin policy. In this way, normal browsing remains uninterrupted while any possible CRSF attacks are blocked!
The extension is easily disabled and contains a small report of all requests which had cookies stripped.
This extension is open source and the source code is viewable at https://github.com/brandonio21/no-csrf
This extension is based on a similar extension by avlidienbrunn
Read more
This extension attempts to prevent Cross-Site Request Forgery by stripping cookies from any (non-GET) request that does not follow the same-origin policy. In this way, normal browsing remains uninterrupted while any possible CRSF attacks are blocked!
The extension is easily disabled and contains a small report of all requests which had cookies stripped.
This extension is open source and the source code is viewable at https://github.com/brandonio21/no-csrf
This extension is based on a similar extension by avlidienbrunn
Source Manifest.json
{"update_url": "https://clients2.google.com/service/update2/crx", "manifest_version": 2, "name": "No-CSRF", "version": "0.42", "description": "Prevent cookies from being client-side sent cross-origin.", "icons": { "128": "badgedis.png", "128": "badge.png" }, "permissions": [ "webRequest", "webRequestBlocking", "tabs", "webNavigation", ""], "background": { "scripts": ["background.js"] }, "browser_action": { "default_icon": "badge.png", "default_popup": "popup.html" }}
Read more
Similar Extensions
Ignore Google Scripts 459 3 ★ 18.68KiB
Xframe Assassin 459 4 ★ 666KiB
Disable Content-Security-Policy 459 91 ★ 29.02KiB
Block Cross Domain protection 459 0 ★ 24.57KiB
Cross Domain - CORS 459 65 ★ 121KiB
No Opener, No Phishers 459 9 ★ 274KiB
Policy Control - JavaScript and Flash blocker 459 12 ★ 20.22KiB
Origin Requests Only (Firewall) 459 12 ★ 102KiB
Policy Control 459 3 ★ 48.47KiB
Cacao CORS Proxy 459 0 ★ 43.12KiB
Block Unreachable Scripts 459 6 ★ 11.06KiB
Clickjacking Test 459 9 ★ 71.23KiB
CounterXSS 459 3 ★ 98.96KiB
Scripter debugger extension 459 2 ★ 1.04MiB
NoDetour 459 7 ★ 125KiB
OWASP Penetration Testing Kit 459 43 ★ 7.14MiB
Vulners Web Scanner 459 20 ★ 534KiB
WebAPI Blocker 459 8 ★ 58.61KiB
Local Cache 459 16 ★ 30.8KiB
Security Tweaks 459 3 ★ 3.07MiB
XSS 459 6 ★ 232KiB
Site Bleacher 459 3 ★ 23.54KiB
Bishop Vulnerability Scanner 459 12 ★ 198KiB
Privacy Settings 459 11 ★ 147KiB
