Episode 95: Attacking Chrome Extensions with MatanBer - Big Impact on the Client-Side
Critical Thinking - Bug Bounty Podcast
Exploring Shadow DOM and Security Risks in Browser Extensions
This chapter examines the intricacies of closed shadow DOM and its role in isolating web elements, comparing it to iframes for better understanding of security layers. It highlights various vulnerabilities in Chrome extensions, particularly focusing on clickjacking risks and potential malicious interactions associated with shadow DOM. By analyzing noteworthy bugs and the architecture of Chrome extensions, the chapter underscores the importance of threat models in fortifying client-side security.
00:00
Transcript
Play full episode
Remember Everything You Learn from Podcasts
Save insights instantly, chat with episodes, and build lasting knowledge - all powered by AI.
