Can a website enumerate your browser's extensions? (privacy uniqueness risk)

MrBrian · Jan 14, 2014

Answer for Firefox: from https://developer.mozilla.org/en-US/docs/Updating_web_applications_for_Firefox_3#section_7:

In prior versions of Firefox, any web page could load scripts or images from chrome using the chrome:// protocol. Among other things, this made it possible for sites to detect the presence of add-ons -- which could be used to breach a user's security by bypassing add-ons that add security features to the browser.

Firefox 3 only allows web content to access items in the chrome://browser/ and chrome://toolkit/ spaces. These files are intended to be accessible by web content. All other chrome content is now blocked from access by the web.
Click to expand...

Also covered in these questions:
http://stackoverflow.com/questions/3380452/can-you-get-a-list-of-firefox-add-ons-programmtically
http://stackoverflow.com/questions/...addons-in-firefox-using-a-webpage-php-javascr
http://stackoverflow.com/questions/...-if-a-firefox-3-add-on-extension-is-installed

Note: browser plugins, such as Flash, can be enumerated by a website.

Panopticlick doesn't list my Firefox extensions.

Log in or Sign up

Can a website enumerate your browser's extensions? (privacy uniqueness risk)

MrBrian Registered Member

Log in or Sign up

Can a website enumerate your browser's extensions? (privacy uniqueness risk)

MrBrian Registered Member

Useful Searches