English
See more
Prevent the rendered web-pages from loading resources hosted in untrusted, writable S3 buckets.
Latest Version
Version
0.1
Update
December 22, 2018
Size
22.08KiB
Developer
Category
Users
2,000+ 
Rating
5 ★
Manifest Version
2
Web Store Status
Extension ID
Languages Support
Permissions
Storage
WebRequest
WebRequestBlocking
WebNavigation
See more
WebRequest
WebRequestBlocking
WebNavigation
truster Extension
Websites often load assets (CSS, JS,..) hosted in AWS S3 buckets. Unfortunately, sometimes such buckets are misconfigured allowing unauthorized users to overwrite their files. This results in the possibility for attackers to inject malicious content (for instance malicious cryptomining JS) that gets delivered to the website's visitors. To protect from this threat, truster, communicating with our backend (https://bucketsec.necst.it/), verifies if the resources requested from the visited websites come from an untrusted, writable, bucket, preventing the loading of such resources.
Read more
Source Manifest.json
{"update_url": "https://clients2.google.com/service/update2/crx", "name": "truster", "version": "0.1", "description": "Prevent the rendered web-pages from loading resources hosted in untrusted, writable S3 buckets.", "content_security_policy": "default-src 'self'; connect-src https://bucketsec.necst.it; style-src https://maxcdn.bootstrapcdn.com/bootstrap/", "permissions": [ "storage", "webRequest", "webRequestBlocking", "webNavigation", "" ], "icons": { "16": "imgs/icon_16.png", "32": "imgs/icon_32.png", "48": "imgs/icon_48.png", "128": "imgs/icon_128.png" }, "background": { "scripts": [ "src/background.js", "src/sha256.min.js" ] }, "browser_action": { "default_icon" : "imgs/icon_16.png", "default_popup" : "src/popup.html", "default_title" : "View blocked S3 resources" }, "options_ui": { "page" : "src/options.html", "open_in_tab" : false }, "manifest_version": 2}
Read more
