Prevent cookies from being client-side sent cross-origin.

Latest Version

Version
0.42
Update
July 4, 2016
Size
9.58KiB
Developer
Category
Users
459
Rating
5 ★
Manifest Version
2
Web Store Status
Languages Support
English
See more
Permissions
WebRequest
WebRequestBlocking
Tabs
WebNavigation

See more

No-CSRF Extension

Cross-Site Request Forgery is a major problem when it comes to browsing the web. If an attacker were to craft a request toward a server that performs an action, the request would contain any identifying cookies you have. As pointed out in academic literature, this can be used to empty bank accounts, change passwords, or anything in between.

This extension attempts to prevent Cross-Site Request Forgery by stripping cookies from any (non-GET) request that does not follow the same-origin policy. In this way, normal browsing remains uninterrupted while any possible CRSF attacks are blocked!

The extension is easily disabled and contains a small report of all requests which had cookies stripped.

This extension is open source and the source code is viewable at https://github.com/brandonio21/no-csrf

This extension is based on a similar extension by avlidienbrunn
Read more

Source Manifest.json

{"update_url": "https://clients2.google.com/service/update2/crx", "manifest_version": 2, "name": "No-CSRF", "version": "0.42", "description": "Prevent cookies from being client-side sent cross-origin.", "icons": { "128": "badgedis.png", "128": "badge.png" }, "permissions": [ "webRequest", "webRequestBlocking", "tabs", "webNavigation", ""], "background": { "scripts": ["background.js"] }, "browser_action": { "default_icon": "badge.png", "default_popup": "popup.html" }}
Read more

How to download and manually install No-CSRF extension for Chrome

Looking for a way to install No-CSRF extensions for Chrome, you can search for them in the Chrome Web Store, clicking the "Add to Chrome" button, and following the straightforward process.

However, you may need to install No-CSRF extensions manually, this article outlines two simple methods to effortlessly install No-CSRF extensions, whether they come as unpacked folders in compressed formats like .zip or as .crx files.

Method 1: Download No-CSRF extension and manually install through Drag &Drop

If you ever need to manually install a No-CSRF extension for Chrome, don't worry, it's a simple process. Just follow these easy steps, and you will have your extension ready to use in no time.

Step 1: Download the No-CSRF Extension by clicking the "Download CRX" button on the website.

Look for the No-CSRF extension you wish to install. Go to the website and download the No-CSRF extension package, which is usually a .CRX file and comes in a zipped file. Here ".crx" file is the format for No-CSRF extension that contains all the data.

Step 2: Extract &Arrange Files

Once the file is downloaded, extract that file into its own folder. Similarly, give that extension files a permanent home. In other words, keep it in a folder that you don't accidentally delete it because these files will be needed to make that extension work.

Step 3: Go to the Chrome Extensions Page

Open Google Chrome and in the address bar, type chrome://extensions; it will open the Google Chrome extensions page. Make sure that "My extensions" is selected in the sidebar.

Step 4: Drag and Drop the Extension

Now, go to the folder where you extracted the No-CSRF extension and drag &drop the extension file from there anywhere onto the extension page within Google Chrome.

Step 5: Complete the Installation

Once you drag and drop the extension file, follow the steps that Google Chrome takes you through. Similarly, if the extension file is of .crx file format, you will be required to review the permissions and then add the extension.

Now, you can manage that added extension as you would like to with any other Chrome extension that you added through Chrome Webstore. Its icon will also appear in the Google Chrome Menu on the right side of the address bar once you activate it.

Method 2: Download No-CSRF extension for Chrome and install in Developer Mode

This is another method to install No-CSRF extension manually, but the twist is that here, you install by enabling the developer mode option provided in Google Chrome. This mode is commonly used for testing extensions or running unpublished tools.

Step 1: Download the No-CSRF extension file

Select and download the No-CSRF extension by clicking the 'Download CRX' button on the website.

Step 2: Extract the downloaded contents

Convert the file to a ZIP file if it is in CRX format then extract the No-CSRF extension zip file or folder that you downloaded. Make sure you extract it using the same folder name and keep it safely in another folder, so you don't delete it by mistake. The extracted folder will be needed to keep your No-CSRF extension running.

Step 3: Open Chrome Extension Setting Page

In the address bar of Google Chrome, type chrome://extensions and open the Chrome Extension Page.

Step 4: Enable Developer Mode

After opening the Chrome Extension page, look at the top right side, and you will find the toggle option of "Developer mode."Simply enable that developer mode option.

Step 5: Load the Unpacked Extension

Once you enable the developer mode option, you will see the menu of Load Unpacked, Pack Extensions and Update. From that, select the option "Load unpacked."

Step 6: Select the Extension Folder

Once the pop-up opens upon clicking Load unpacked, select the No-CSRF extension directory and click on the "Select Folder "button.

Step 7: Confirm and Install

After you select an extension folder of a Google Chrome extension you're installing manually, confirm its installation for the final time and let the installation complete.

Conclusion

Here we've made a step-by-step guide on How to manually install No-CSRF extension in 2 ways. We hope this guide proves helpful.

Similar Extensions

icon

Ignore Google Scripts Extension · Productivity 459 3 ★ 18.68KiB

icon

Xframe Assassin Extension · Productivity 459 4 ★ 666KiB

icon

Disable Content-Security-Policy Extension · Developer Tools 459 91 ★ 29.02KiB

icon

Block Cross Domain protection Extension · Developer Tools 459 0 ★ 24.57KiB

icon

Cross Domain - CORS Extension · Developer Tools 459 65 ★ 121KiB

icon

No Opener, No Phishers Extension · Developer Tools 459 9 ★ 274KiB

icon

Policy Control - JavaScript and Flash blocker Extension · Productivity 459 12 ★ 20.22KiB

icon

Origin Requests Only (Firewall) Extension · Productivity 459 12 ★ 102KiB

icon

Policy Control Extension · Productivity 459 3 ★ 48.47KiB

icon

Cacao CORS Proxy Extension · Developer Tools 459 0 ★ 43.12KiB

icon

Block Unreachable Scripts Extension · Productivity 459 6 ★ 11.06KiB

icon

Clickjacking Test Extension · Developer Tools 459 9 ★ 71.23KiB

icon

CounterXSS Extension · Accessibility 459 3 ★ 98.96KiB

icon

Scripter debugger extension Extension · Developer Tools 459 2 ★ 1.04MiB

icon

NoDetour Extension · Productivity 459 7 ★ 125KiB

icon

OWASP Penetration Testing Kit Extension · Developer Tools 459 43 ★ 7.14MiB

icon

Vulners Web Scanner Extension · Productivity 459 20 ★ 534KiB

icon

WebAPI Blocker Extension · Productivity 459 8 ★ 58.61KiB

icon

Local Cache Extension · Productivity 459 16 ★ 30.8KiB

icon

Security Tweaks Extension · Productivity 459 3 ★ 3.07MiB

icon

XSS Extension · Developer Tools 459 6 ★ 232KiB

icon

Site Bleacher Extension · Productivity 459 3 ★ 23.54KiB

icon

Bishop Vulnerability Scanner Extension · Developer Tools 459 12 ★ 198KiB

icon

Privacy Settings Extension · Productivity 459 11 ★ 147KiB