I am trying to check if I installed a malicious chrome extension which can steal credit card data. That may be some extension that has an access to all data on all sites. chrome:://extensions does not seem to have this data. How can I check which data is available to google chrome extension?
1 Answer
That may be some extension that has an access to all data on all sites.
The premise that extension requests permissions and hence can steal your data is false. Having said that, if you want to check the permissions, then while installing you get a list of things the Extension can access.
To review this post installation, Head over to the Extensions page, chrome://extensions
.
Click on the "Visit Website" & then on the details tab.
You'll see the permissions listing on the lower right corner.
.
Another way is to head over to %localappdata%\Google\Chrome\User Data\Default\Extensions\id where id is the id below the extension(to show the id, Developer mode tickbox must be checked. From this folder, you can examine the manifest file to see what it requests. Of course, you can go one step further & just examine the entire extension source code itself.
-
4Why is my premise false? "The premise that extension requests permissions and hence can steal your data is false." If the extension has access to all data on all web-sites therefore it can access my credit-card data, right? Therefore it can transfer this data to own server. Where is the mistake?– AyratCommented Jan 18, 2013 at 13:34