# Browser Extension

Browser extensions are software add-ons that modify and enhance browser capabilities, commonly built with extension APIs.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Inertia DevTools Now Available for Firefox

DevFeed: [Inertia DevTools Now Available for Firefox](<https://devfeed.tech/articles/inertia-devtools-now-available-for-firefox-41326.md>)

Original publisher: [Read original article](<https://laravel-news.com/inertia-devtools-firefox>)

Author: Paul Redmond

Published: 2026-09-17T02:28:55Z

Content type: release

Language: en

Sources: [Laravel](<https://devfeed.tech/sources/laravel.md>)

Topics: [Firefox](<https://devfeed.tech/topics/firefox.md>), [Browser Extension](<https://devfeed.tech/topics/browser-extension.md>), [developer tooling](<https://devfeed.tech/topics/developer-tooling.md>), [Chrome](<https://devfeed.tech/topics/chrome.md>), [vs-code](<https://devfeed.tech/topics/vs-code.md>), [phpstorm](<https://devfeed.tech/topics/phpstorm.md>)

Tags: [chrome-extension](<https://devfeed.tech/tags/chrome-extension.md>), [devtools](<https://devfeed.tech/tags/devtools.md>), [editor](<https://devfeed.tech/tags/editor.md>), [extension](<https://devfeed.tech/tags/extension.md>), [features](<https://devfeed.tech/tags/features.md>), [firefox](<https://devfeed.tech/tags/firefox.md>), [news](<https://devfeed.tech/tags/news.md>), [panel](<https://devfeed.tech/tags/panel.md>), [phpstorm](<https://devfeed.tech/tags/phpstorm.md>), [vs-code](<https://devfeed.tech/tags/vs-code.md>)

### AI overview

Inertia DevTools is now available as an official Firefox extension with feature parity with the Chrome extension. It records Inertia visits and exposes props, request and response details, routes, controller actions, and page state in a Firefox DevTools panel. Sensitive fields are redacted, and recorded data remains on the local machine.

### Source excerpt

Inertia DevTools, the panel for inspecting Inertia.js visits and props, is now on Firefox with the same features as the Chrome extension. The post Inertia DevTools Now Available for Firefox appeared first on Laravel News. Join the Laravel Newsletter to get Laravel articles like this directly in your inbox.

## How to Monetize a Browser Extension with a Freemium Model

DevFeed: [How to Monetize a Browser Extension with a Freemium Model](<https://devfeed.tech/articles/how-to-monetize-a-browser-extension-with-a-freemium-model-9695.md>)

Original publisher: [Read original article](<https://dodopayments.com/blogs/browser-extension-freemium-payments/>)

Author: Ayush Agarwal

Published: 2026-03-28T00:00:00Z

Content type: tutorial

Language: en

Sources: [Dodo Payments Blog](<https://devfeed.tech/sources/dodo-payments-blog.md>)

Topics: [Extension](<https://devfeed.tech/topics/extension.md>), [Browser Extension](<https://devfeed.tech/topics/browser-extension.md>), [Chrome extension](<https://devfeed.tech/topics/chrome-extension.md>), [Firefox extension](<https://devfeed.tech/topics/firefox-extension.md>)

Tags: [chrome](<https://devfeed.tech/tags/chrome.md>), [chrome-extension](<https://devfeed.tech/tags/chrome-extension.md>), [extension](<https://devfeed.tech/tags/extension.md>), [firefox](<https://devfeed.tech/tags/firefox.md>), [how-to](<https://devfeed.tech/tags/how-to.md>), [license-keys](<https://devfeed.tech/tags/license-keys.md>), [payments](<https://devfeed.tech/tags/payments.md>), [subscription-billing](<https://devfeed.tech/tags/subscription-billing.md>)

### AI overview

A guide to monetizing browser extensions with a freemium model. It covers keeping core functionality free, gating advanced features and usage limits, validating license keys on a server, and using subscription billing and customer self-service portals.

### Source excerpt

Build a profitable freemium browser extension. Implement free vs paid feature gating, license key activation, and subscription billing for Chrome and Firefox extensions.

## How to Monetize a Chrome Extension in 2026 (4 Models + Step-By-Step Setup)

DevFeed: [How to Monetize a Chrome Extension in 2026 (4 Models + Step-By-Step Setup)](<https://devfeed.tech/articles/how-to-monetize-a-chrome-extension-in-2026-4-models-step-by-step-setup-10050.md>)

Original publisher: [Read original article](<https://dodopayments.com/blogs/monetize-chrome-extension/>)

Author: Ayush Agarwal

Published: 2026-03-23T00:00:00Z

Content type: tutorial

Language: en

Sources: [Dodo Payments Blog](<https://devfeed.tech/sources/dodo-payments-blog.md>)

Topics: [Chrome extension](<https://devfeed.tech/topics/chrome-extension.md>), [Extension](<https://devfeed.tech/topics/extension.md>), [Browser Extension](<https://devfeed.tech/topics/browser-extension.md>), [Code](<https://devfeed.tech/topics/code.md>)

Tags: [2026](<https://devfeed.tech/tags/2026.md>), [billing](<https://devfeed.tech/tags/billing.md>), [business](<https://devfeed.tech/tags/business.md>), [chrome](<https://devfeed.tech/tags/chrome.md>), [chrome-extension](<https://devfeed.tech/tags/chrome-extension.md>), [code](<https://devfeed.tech/tags/code.md>), [extension](<https://devfeed.tech/tags/extension.md>), [global-payments](<https://devfeed.tech/tags/global-payments.md>), [how-to](<https://devfeed.tech/tags/how-to.md>), [license-keys](<https://devfeed.tech/tags/license-keys.md>), [monetization](<https://devfeed.tech/tags/monetization.md>), [payments](<https://devfeed.tech/tags/payments.md>), [saas](<https://devfeed.tech/tags/saas.md>), [subscriptions](<https://devfeed.tech/tags/subscriptions.md>)

### AI overview

A practical guide to monetizing Chrome extensions in 2026. It explains freemium, subscriptions, license keys, one-time purchases, and usage-based models, and covers payment, tax compliance, license management, and implementation considerations.

### Source excerpt

Chrome extension monetization models: freemium, subscriptions, license keys, one-time, usage-based. Code samples plus a license delivery walkthrough.

## Hacking Displate (For Fun!)

DevFeed: [Hacking Displate (For Fun!)](<https://devfeed.tech/articles/hacking-displate-for-fun-38395.md>)

Original publisher: [Read original article](<https://blog.danlew.net/2025/11/18/hacking-displate-shenanigans/>)

Author: Dan Lew

Published: 2025-11-18T15:00:46Z

Content type: opinion

Language: en

Sources: [Dan Lew Blog](<https://devfeed.tech/sources/dan-lew-blog.md>)

Topics: [Hacking](<https://devfeed.tech/topics/hacking.md>), [Website](<https://devfeed.tech/topics/website.md>), [API](<https://devfeed.tech/topics/api.md>), [Browser Extension](<https://devfeed.tech/topics/browser-extension.md>), [browser](<https://devfeed.tech/topics/browser.md>), [data](<https://devfeed.tech/topics/data.md>)

Tags: [api](<https://devfeed.tech/tags/api.md>), [browser](<https://devfeed.tech/tags/browser.md>), [extension](<https://devfeed.tech/tags/extension.md>), [hacking](<https://devfeed.tech/tags/hacking.md>), [order](<https://devfeed.tech/tags/order.md>), [scraping](<https://devfeed.tech/tags/scraping.md>), [tracking](<https://devfeed.tech/tags/tracking.md>), [website](<https://devfeed.tech/tags/website.md>)

### AI overview

A developer documents experiments with Displate's website, including tracking Limited Edition resale prices and using its API to discover early-access links. The article also describes ordering a Limited Edition before its public release and competing with another person using a browser extension to find links and monitor inventory.

### Source excerpt

During the pandemic my weird vice/obsession became Displates (metal wall art hung up by magnets): Some of my Displates (along with other tchotchkes in my office) For me, part of the hobby was poking holes in their website. I've long stopped trying to give their devs heartburn,

## Introducing: Local Browser AI

DevFeed: [Introducing: Local Browser AI](<https://devfeed.tech/articles/introducing-local-browser-ai-29081.md>)

Original publisher: [Read original article](<https://blog.alexewerlof.com/p/local-browser-ai>)

Author: Alex Ewerlöf

Published: 2025-10-13T07:51:29Z

Content type: article

Language: en

Sources: [Alex Ewerlof Notes](<https://devfeed.tech/sources/alex-ewerlof-notes.md>)

Topics: [browser](<https://devfeed.tech/topics/browser.md>), [Artificial Intelligence](<https://devfeed.tech/topics/ai.md>), [Browser Extension](<https://devfeed.tech/topics/browser-extension.md>), [JavaScript](<https://devfeed.tech/topics/javascript.md>), [On-device AI](<https://devfeed.tech/topics/on-device-ai.md>)

Tags: [ai](<https://devfeed.tech/tags/ai.md>), [browser](<https://devfeed.tech/tags/browser.md>), [extension](<https://devfeed.tech/tags/extension.md>), [interface](<https://devfeed.tech/tags/interface.md>), [javascript](<https://devfeed.tech/tags/javascript.md>), [on-device-ai](<https://devfeed.tech/tags/on-device-ai.md>), [open-source](<https://devfeed.tech/tags/open-source.md>)

### AI overview

This technical post explains how the Prompt API enables local language-model chat in the browser and examines the Local Browser AI extension, which is built with plain JavaScript and native browser APIs. It also describes the extension's permissions, privacy properties, open-source MIT license, and supported platforms.

### Source excerpt

Using the new Prompt API for local chat in the browser

## Vibe-engineering a Firefox add-on: Container Traffic Control

DevFeed: [Vibe-engineering a Firefox add-on: Container Traffic Control](<https://devfeed.tech/articles/vibe-engineering-a-firefox-add-on-container-traffic-control-25235.md>)

Original publisher: [Read original article](<https://kau.sh/blog/container-traffic-control/>)

Author: Kaushik Gopal

Published: 2025-09-29T02:31:35Z

Content type: opinion

Language: en

Sources: [Kaushik Gopal's Site](<https://devfeed.tech/sources/kaushik-gopal-s-site.md>)

Topics: [Browser Extension](<https://devfeed.tech/topics/browser-extension.md>), [Firefox](<https://devfeed.tech/topics/firefox.md>), [JavaScript](<https://devfeed.tech/topics/javascript.md>), [Code review](<https://devfeed.tech/topics/code-review.md>), [GitHub](<https://devfeed.tech/topics/github.md>), [Software](<https://devfeed.tech/topics/software.md>)

Tags: [code-review](<https://devfeed.tech/tags/code-review.md>), [extension](<https://devfeed.tech/tags/extension.md>), [firefox](<https://devfeed.tech/tags/firefox.md>), [github](<https://devfeed.tech/tags/github.md>), [javascript](<https://devfeed.tech/tags/javascript.md>), [software](<https://devfeed.tech/tags/software.md>)

### AI overview

An experiment in building the Container Traffic Control Firefox add-on entirely through agent-assisted development, without manually editing JavaScript. The author argues that careful instructions, prompting, pruning, testing, organization, logging, comments, and code review can produce a readable and maintainable small codebase.

### Source excerpt

I wanted to test a simple claim: you can ship maintainable software by vibe-engineering end to end. I set strict constraints: New platform (I haven't built a browser extension/add-on) Language I'm no longer proficient in (JavaScript) Zero manual code editing In about a day1 I had a working Firefox add-on I could submit for review. The code meets my bar for readability and long-term change. Even the icon came from an image model.2 Introducing Container Traffic Control. Install and source - Install: Firefox add-on listing - Code: github.com/kaushikgopal/ff-container-traffic-control On the vibe-engineering process ## It's in vogue to share horror stories of decimated vibe-coded repos.3 But I'm convinced that with the right fundamentals, you can vibe-engineer4 a codebase you'd comfortably hand to another engineer. This was my experiment to vet my feelings on the subject. Granted, this was a small and arguably very simple repository, but I've also seen success with moderately larger codebases personally. It comes down to scrupulous pruning: updating system instructions, diligent prompting, and code review. I plan to write much more about this later, but let's talk about some of the mechanics of how it went: I didn't write a single line of JavaScript by hand. When I needed changes, better structure, reusable patterns, small refactors -- I asked the agent. The goal throughout was simple: keep the codebase readable and maintainable. It now has a lot of the things we consider important for a decent codebase: Tests (for the important parts) Well-organized code Clear, useful logging Code comments (uses a style called space-shuttle style programming, which I think is increasingly valuable with vibe-engineering) The best part: most of this came together over two days.5 Some example pull requests from the repository with the exact prompt I used and the plan that was generated: Here's the very first prompt I used to generate the guts of the code: # Role/Persona: - you are an expert

## Captionary Browser Extension Provides Subtitle Word Definitions on Netflix

DevFeed: [Captionary Browser Extension Provides Subtitle Word Definitions on Netflix](<https://devfeed.tech/articles/learning-english-through-shows-captionary-makes-it-effortless-39766.md>)

Original publisher: [Read original article](<https://furkankolcu.com/post/learning-english-through-shows-captionary-makes-it-effortless>)

Author: Furkan Kolcu

Published: 2025-09-07T13:31:21Z

Content type: release

Language: en

Sources: [Furkan Kolcu - Software Engineer Blog](<https://devfeed.tech/sources/furkan-kolcu-software-engineer-blog.md>)

Topics: [Browser Extension](<https://devfeed.tech/topics/browser-extension.md>), [Extension](<https://devfeed.tech/topics/extension.md>), [browser](<https://devfeed.tech/topics/browser.md>), [Learning](<https://devfeed.tech/topics/learning.md>), [Netflix](<https://devfeed.tech/topics/netflix.md>), [GitHub](<https://devfeed.tech/topics/github.md>)

Tags: [browser](<https://devfeed.tech/tags/browser.md>), [chrome-addon](<https://devfeed.tech/tags/chrome-addon.md>), [english-learning](<https://devfeed.tech/tags/english-learning.md>), [english-vocabulary](<https://devfeed.tech/tags/english-vocabulary.md>), [extension](<https://devfeed.tech/tags/extension.md>), [firefox-addon](<https://devfeed.tech/tags/firefox-addon.md>), [github](<https://devfeed.tech/tags/github.md>), [language-learning](<https://devfeed.tech/tags/language-learning.md>), [language-learning-addon](<https://devfeed.tech/tags/language-learning-addon.md>), [learning](<https://devfeed.tech/tags/learning.md>), [netflix](<https://devfeed.tech/tags/netflix.md>), [netflix-addon](<https://devfeed.tech/tags/netflix-addon.md>), [technology](<https://devfeed.tech/tags/technology.md>)

### AI overview

Captionary is a browser extension for learning English through shows. It lets users click words in English Netflix subtitles to see definitions without leaving the screen. Support for other platforms and languages is planned.

### Source excerpt

If you're watching movies or series to improve your English, you're not alone -- and you're doing it right. Subtitles can be a great way to pick up new words in context, especially when you hear how they're used in real conversations.

## Tailor-made browser extensions for increased testing efficiency

DevFeed: [Tailor-made browser extensions for increased testing efficiency](<https://devfeed.tech/articles/tailor-made-browser-extensions-for-increased-testing-efficiency-28053.md>)

Original publisher: [Read original article](<https://tech.trivago.com/post/2025-04-23-tailor-made-browser-extensions-for-increased-testing-efficiency/>)

Author: Raymond Saba I'm an SDET who enjoys building test automation; Finding Ways

Published: 2025-04-23T00:00:00Z

Content type: article

Language: en

Sources: [Trivago](<https://devfeed.tech/sources/trivago.md>)

Topics: [Testing](<https://devfeed.tech/topics/testing.md>), [Browser Extension](<https://devfeed.tech/topics/browser-extension.md>), [Extension](<https://devfeed.tech/topics/extension.md>), [Development](<https://devfeed.tech/topics/development.md>)

Tags: [browser](<https://devfeed.tech/tags/browser.md>), [development](<https://devfeed.tech/tags/development.md>), [extensions](<https://devfeed.tech/tags/extensions.md>), [quality-assurance](<https://devfeed.tech/tags/quality-assurance.md>), [reverse-engineering](<https://devfeed.tech/tags/reverse-engineering.md>), [test-automation](<https://devfeed.tech/tags/test-automation.md>), [testing](<https://devfeed.tech/tags/testing.md>)

### AI overview

The article describes how trivago's QA team used custom browser extensions to support exploratory testing, reduce cumbersome testing processes, and save time. It discusses an extension created through reverse engineering to inspect Google Tag Manager data-layer values and another that identified the version of the trivago website being viewed.

### Source excerpt

When doing exploratory testing on a web application, the nature of activities involves discovering things and not repeating the same patterns. However, there might be aspects that could be impro...

## The article criticizes Google's moderation of malicious Chrome Web Store extensions

DevFeed: [The article criticizes Google's moderation of malicious Chrome Web Store extensions](<https://devfeed.tech/articles/chrome-web-store-is-a-mess-36623.md>)

Original publisher: [Read original article](<https://palant.info/2025/01/13/chrome-web-store-is-a-mess/>)

Author: Wladimir Palant

Published: 2025-01-13T13:12:43Z

Content type: opinion

Language: en

Sources: [Almost Secure](<https://devfeed.tech/sources/almost-secure.md>)

Topics: [Google Chrome](<https://devfeed.tech/topics/google-chrome.md>), [Browser Extension](<https://devfeed.tech/topics/browser-extension.md>), [Google](<https://devfeed.tech/topics/google.md>), [trust](<https://devfeed.tech/topics/trust.md>)

Tags: [extension](<https://devfeed.tech/tags/extension.md>), [google-chrome](<https://devfeed.tech/tags/google-chrome.md>), [reports](<https://devfeed.tech/tags/reports.md>), [transparency](<https://devfeed.tech/tags/transparency.md>), [trust](<https://devfeed.tech/tags/trust.md>)

### AI overview

This opinion article argues that Google's moderation of malicious and problematic Chrome Web Store extensions is ineffective and inconsistent. It describes automated moderation as inadequate, says legitimate add-on authors also face problems, and cites the author's experience reporting harmful extensions.

### Source excerpt

Let's make one thing clear first: I'm not singling out Google's handling of problematic and malicious browser extensions because it is worse than Microsoft's for example. No, Microsoft is probably even worse but I never bothered finding out. That's because Microsoft Edge doesn't matter, its market share is too small. Google Chrome on the other hand is used by around 90% of the users world-wide, and one would expect Google to take their responsibility to protect its users very seriously, right? After all, browser extensions are one selling point of Google Chrome, so certainly Google would make sure they are safe? Unfortunately, my experience reporting numerous malicious or otherwise problematic browser extensions speaks otherwise. Google appears to take the "least effort required" approach towards moderating Chrome Web Store. Their attempts to automate all things moderation do little to deter malicious actors, all while creating considerable issues for authors of legitimate add-ons. Even when reports reach Google's human moderation team, the actions taken are inconsistent, and Google generally shies away from taking decisive actions against established businesses. As a result, for a decade my recommendation for Chrome users has been to stay away from Chrome Web Store if possible. Whenever extensions are absolutely necessary, it should be known who is developing them, why, and how the development is being funded. Just installing some extension from Chrome Web Store, including those recommended by Google or "featured," is very likely to result in your browsing data being sold or worse. Google employees will certainly disagree with me. Sadly, much of it is organizational blindness. I am certain that you meant it well and that you did many innovative things to make it work. But looking at it from the outside, it's the result that matters. And for the end users the result is a huge (and rather dangerous) mess. Contents Some recent examples The reporting process Chrome Web

## BIScience: Collecting browsing history under false pretenses

DevFeed: [BIScience: Collecting browsing history under false pretenses](<https://devfeed.tech/articles/biscience-collecting-browsing-history-under-false-pretenses-36622.md>)

Original publisher: [Read original article](<https://palant.info/2025/01/13/biscience-collecting-browsing-history-under-false-pretenses/>)

Author: Anonymous Researcher

Published: 2025-01-13T12:57:04Z

Content type: article

Language: en

Sources: [Almost Secure](<https://devfeed.tech/sources/almost-secure.md>)

Topics: [Browser Extension](<https://devfeed.tech/topics/browser-extension.md>), [data](<https://devfeed.tech/topics/data.md>), [SDKs](<https://devfeed.tech/topics/sdks.md>), [Security](<https://devfeed.tech/topics/security.md>)

Tags: [browser](<https://devfeed.tech/tags/browser.md>), [data](<https://devfeed.tech/tags/data.md>), [extension](<https://devfeed.tech/tags/extension.md>), [most-other-articles-about-add-ons-by-wladimir-palant](<https://devfeed.tech/tags/most-other-articles-about-add-ons-by-wladimir-palant.md>), [privacy](<https://devfeed.tech/tags/privacy.md>), [sdk](<https://devfeed.tech/tags/sdk.md>)

### AI overview

An anonymous researcher examines claims that BIScience and its brands collect users' browsing histories through Chrome extensions, partner extensions, and an SDK, then sell the data through products including Clickstream OS and AdClarity. The article argues that BIScience's public disclosures and privacy practices are inconsistent with its data-collection practices.

### Source excerpt

This is a guest post by a researcher who wants to remain anonymous. You can contact the author via email. Recently, John Tuckner of Secure Annex and Wladimir Palant published great research about how BIScience and its various brands collect user data. This inspired us to publish part of our ongoing research to help the extension ecosystem be safer from bad actors. This post details what BIScience does with the collected data and how their public disclosures are inconsistent with actual practices, based on evidence compiled over several years. Screenshot of claims on the BIScience website Contents Who is BIScience? BIScience collects data from millions of users BIScience buys data from partner third-party extensions BIScience receives raw data, not anonymized data Misleading CWS policies compliance BIScience extensions exception claims Partner extensions exception claims, guided by BIScience BIScience SDK Unnecessary features Misleading privacy policy disclosures Misleading user consent Our hope for the future Related reading IOCs Who is BIScience? BIScience is a long-established data broker that owns multiple extensions in the Chrome Web Store (CWS) that collect clickstream data under false pretenses. They also provide a software development kit (SDK) to partner third-party extension developers to collect and sell clickstream data from users, again under false pretenses. This SDK will send data to sclpfybn.com and other endpoints controlled by BIScience. "Clickstream data" is an analytics industry term for "browsing history". It consists of every URL users visit as they browse the web. According to their website, BIScience "provides the deepest digital & behavioral data intelligence to market research companies, brands, publishers & investment firms". They sell clickstream data through their Clickstream OS product and sell derived data under other product names. BIScience owns AdClarity. They provide "advertising intelligence" for companies to monitor competitors. I

## Hack Day 2024: Sports and Election Prototypes

DevFeed: [Hack Day 2024: Sports and Election Prototypes](<https://devfeed.tech/articles/hack-day-summer-of-sport-fall-of-democracy-19973.md>)

Original publisher: [Read original article](<https://www.theguardian.com/info/article/2024/jun/17/hack-day-summer-of-sport-fall-of-democracy>)

Author: Rasha Ardati, Mariot Chauvin

Published: 2024-06-17T14:42:54Z

Content type: article

Language: en

Sources: [Guardian](<https://devfeed.tech/sources/guardian.md>)

Topics: [Demo](<https://devfeed.tech/topics/demo.md>), [Browser Extension](<https://devfeed.tech/topics/browser-extension.md>), [Programming](<https://devfeed.tech/topics/programming.md>), [Structured-data](<https://devfeed.tech/topics/structured-data.md>)

Tags: [demo](<https://devfeed.tech/tags/demo.md>), [extension](<https://devfeed.tech/tags/extension.md>), [hack](<https://devfeed.tech/tags/hack.md>), [programming](<https://devfeed.tech/tags/programming.md>)

### AI overview

Guardian colleagues held a two-day 2024 hack day themed around sports and upcoming elections. The article highlights selected concepts, including favicon-based liveblog displays, a browser extension that turns paragraphs into crosswords, and structured tennis scores for liveblogs.

### Source excerpt

Recently, colleagues across the product and engineering department, as well as other parts of the organisation, came together for another exciting hack day For our first hack day of 2024 we kicked off with a grand theme around all the major events of the world, including sport and upcoming elections around the world. Hackers played around with the idea of using python programming language and real-time mobile telemetry data to influence the outcome of UK elections, they proposed a bold new journalistic geometry, added fun polls, quizzes and newsletters sign ups to the live blog, as well as posed the question: " Can bedrock do what CAPI can do?" And that's only 4 of the 19 amazing hacks produced and presented over the two-day event! A counter in the favicon for unread liveblog entries, which would appear on liveblogs. A more experimental demo that displayed a tiny version of the Guardian article being read entirely within the favicon. This included a Guardian header, real-time scrolling, all the article text, and images. Continue reading...

## Exploring WebExtension security vulnerabilities in React Developer Tools and Vue.js devtools

DevFeed: [Exploring WebExtension security vulnerabilities in React Developer Tools and Vue.js devtools](<https://devfeed.tech/articles/exploring-webextension-security-vulnerabilities-in-react-developer-tools-and-vue-js-devtools-8234.md>)

Original publisher: [Read original article](<https://snyk.io/blog/webextension-security-vulnerabilities-react-developer-tools-vue-js/>)

Author: Calum Hutton

Published: 2023-11-27T05:00:00Z

Content type: article

Language: en

Sources: [Blog RSS Feed | Snyk](<https://devfeed.tech/sources/blog-rss-feed-snyk.md>)

Topics: [WebExtension](<https://devfeed.tech/topics/webextension.md>), [Browser Extension](<https://devfeed.tech/topics/browser-extension.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [Security](<https://devfeed.tech/topics/security.md>), [React](<https://devfeed.tech/topics/react.md>), [Vue.js](<https://devfeed.tech/topics/vue.md>)

Tags: [application-security](<https://devfeed.tech/tags/application-security.md>), [awareness](<https://devfeed.tech/tags/awareness.md>), [blog](<https://devfeed.tech/tags/blog.md>), [browser](<https://devfeed.tech/tags/browser.md>), [code-security](<https://devfeed.tech/tags/code-security.md>), [developer](<https://devfeed.tech/tags/developer.md>), [devrel](<https://devfeed.tech/tags/devrel.md>), [extensions](<https://devfeed.tech/tags/extensions.md>), [react](<https://devfeed.tech/tags/react.md>), [security](<https://devfeed.tech/tags/security.md>), [security-vulnerabilities](<https://devfeed.tech/tags/security-vulnerabilities.md>), [snyk-platform](<https://devfeed.tech/tags/snyk-platform.md>), [vue](<https://devfeed.tech/tags/vue.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>)

### AI overview

This article examines security risks in WebExtensions, focusing on vulnerabilities identified in React Developer Tools and Vue.js devtools. It explains the cross-browser WebExtension architecture and discusses risks including unverified external messages, code injection, and XSS.

### Source excerpt

Snyk's security researchers have identified and disclosed some vulnerabilities within some popular browser extensions: React Developer Tools and Vue.js devtools. This post will explore the WebExtension technology and look into the vulnerabilities identified.

## Hack Day: Food Glorious Food

DevFeed: [Hack Day: Food Glorious Food](<https://devfeed.tech/articles/hack-day-food-glorious-food-19963.md>)

Original publisher: [Read original article](<https://www.theguardian.com/info/2023/may/31/hack-day-food-glorious-food>)

Author: Rasha Ardati

Published: 2023-05-31T08:45:02Z

Content type: article

Language: en

Sources: [Guardian](<https://devfeed.tech/sources/guardian.md>)

Topics: [Browser Extension](<https://devfeed.tech/topics/browser-extension.md>), [App](<https://devfeed.tech/topics/app.md>), [Artificial Intelligence](<https://devfeed.tech/topics/ai.md>), [web browser](<https://devfeed.tech/topics/web-browser.md>), [Image](<https://devfeed.tech/topics/image.md>), [stable-diffusion](<https://devfeed.tech/topics/stable-diffusion.md>)

Tags: [ai](<https://devfeed.tech/tags/ai.md>), [browser](<https://devfeed.tech/tags/browser.md>), [extension](<https://devfeed.tech/tags/extension.md>), [hack](<https://devfeed.tech/tags/hack.md>), [images](<https://devfeed.tech/tags/images.md>), [stable-diffusion](<https://devfeed.tech/tags/stable-diffusion.md>)

### AI overview

The Guardian's first hack day of 2023 focused on food-related ideas and produced more than 22 hacks over two days. Projects included browser extensions, recipe interfaces, a restaurant review mapper, microwave-friendly recipes, and an AI tool that generates recipe-step images using stable diffusion or DALL-E.

### Source excerpt

This month, colleagues across the product and engineering department, as well as other parts of the organisation, came together for another exciting hack day For our first hack day of 2023 we kicked off with a delicious theme around 'Food', with a side of the usual 'free-for-all' of course. Hackers were invited to think about all things edible, whether as an app, a new search method for recipes, a meal planner or perhaps a choose your own adventure game where your date is coming for dinner in an hour and a half, and you have decided, perhaps too ambitiously, to cook them an elaborate Ottolenghi recipe from the Guardian archives. We produced and presented over 22 amazing hacks over the two-day event. These included: Migrating our tone/recipes page to our latest rendering tiers, A web browser extension to help users understand cooking language and become better cooks, making Guardian recipes microwave-friendly, a restaurant review mapper, implementing a Guardian app section for food content and a web browser extension to appeal to our tofu-eating readers. Continue reading...

## Results of Quick Testing of Documentation Tools' Accessibility

DevFeed: [Results of Quick Testing of Documentation Tools' Accessibility](<https://devfeed.tech/articles/results-of-quick-testing-of-documentation-tools-accessibility-38449.md>)

Original publisher: [Read original article](<https://eevis.codes/blog/2022-08-11/results-of-quick-testing-of-documentation-tools-accessibility/>)

Author: Eevis Panula

Published: 2023-01-03T08:57:41.997000Z

Content type: article

Language: en

Sources: [Eevis Blog](<https://devfeed.tech/sources/eevis-blog.md>)

Topics: [Accessibility](<https://devfeed.tech/topics/accessibility.md>), [Testing](<https://devfeed.tech/topics/testing.md>), [Documentation](<https://devfeed.tech/topics/documentation.md>), [Swagger](<https://devfeed.tech/topics/swagger.md>), [Browser Extension](<https://devfeed.tech/topics/browser-extension.md>), [OpenAPI Specification](<https://devfeed.tech/topics/openapi.md>), [Document Object Model (DOM)](<https://devfeed.tech/topics/dom.md>)

Tags: [accessibility](<https://devfeed.tech/tags/accessibility.md>), [automated](<https://devfeed.tech/tags/automated.md>), [color](<https://devfeed.tech/tags/color.md>), [documentation](<https://devfeed.tech/tags/documentation.md>), [input](<https://devfeed.tech/tags/input.md>), [keyboard](<https://devfeed.tech/tags/keyboard.md>), [openapi-specification](<https://devfeed.tech/tags/openapi-specification.md>), [screen](<https://devfeed.tech/tags/screen.md>), [swagger](<https://devfeed.tech/tags/swagger.md>), [testing](<https://devfeed.tech/tags/testing.md>)

### AI overview

This article reports quick accessibility testing of Swagger, Read the Docs, Docusaurus, and GitBook using the Axe browser extension, DOM inspection, and keyboard testing. The testing was not exhaustive because it did not include screen readers, narrower viewports, or zooming. For Swagger UI, Axe identified 64 issues, including color-contrast problems, form inputs without programmatically associated labels, and missing landmark regions.

### Source excerpt

When writing my blog post about what backend devs can do for accessibility, I did some quick accessibility tests for different documentation tools. Initially, I thought I'd write about the results in that blog post, but there was just too much to report. So, I ended up writing this blog post. I chose four tools that I know many projects are using. These tools are: Swagger Read the Docs Docusaurus GitBook First, I ran an automated test with the aXe browser extension and dug deeper into the DOM based on the test results. After that, I tested the site with a keyboard. In this blog post, I'll share the test results and some thoughts about them. As you can see from the steps described above, the testing was not exhaustive. I just wanted to get an overview of the issues. I did not, for example, test with a screen reader or with narrower viewports (or zooming). This was a conscious decision, partly because I didn't have time and partly because this blog post would've been super long. And I think this already provides some overview of the state of accessibility of these tools. Let's get started. Swagger URL used for testing: https://petstore3.swagger.io/ Swagger is a set of tools used for API documentation. The Swagger API project started in 2011. Initially, it was a specification, but it was later named OpenAPI Specification. So it has a long history, and many projects use it. One of its tools is Swagger UI, a user interface for browsing the API endpoints. That's the one I'm testing for this blog post. Testing Swagger UI with Axe Runnin Axe-browser extension showed 64 issues, two of which are critical, 35 serious, 18 moderate, and 7 minor. Most of the issues (37) were related to color contrast issues. The contrast ratio for the problematic color combinations ranged between 2.03 and 3.75. Another problem was form input without programmatically associated labels. Some of them were flagged, but when I started digging deeper into the site's code, I noticed that not every insta

## A Front-End Development Experience Working on the TextSecure Chrome Browser Extension

DevFeed: [A Front-End Development Experience Working on the TextSecure Chrome Browser Extension](<https://devfeed.tech/articles/star-quality-1850.md>)

Original publisher: [Read original article](<https://signal.org/blog/star-quality/>)

Published: 2015-01-14T00:00:00Z

Content type: opinion

Language: en

Sources: [Signal Blog](<https://devfeed.tech/sources/signal-blog.md>)

Topics: [Development](<https://devfeed.tech/topics/development.md>), [Front end](<https://devfeed.tech/topics/frontend.md>), [Browser Extension](<https://devfeed.tech/topics/browser-extension.md>), [Backbone.js](<https://devfeed.tech/topics/backbonejs.md>), [JavaScript](<https://devfeed.tech/topics/javascript.md>), [pull-requests](<https://devfeed.tech/topics/pull-requests.md>), [Chrome](<https://devfeed.tech/topics/chrome.md>), [Git](<https://devfeed.tech/topics/git.md>), [Library](<https://devfeed.tech/topics/library.md>)

Tags: [browser](<https://devfeed.tech/tags/browser.md>), [chrome](<https://devfeed.tech/tags/chrome.md>), [extension](<https://devfeed.tech/tags/extension.md>), [front-end](<https://devfeed.tech/tags/front-end.md>), [front-end-development](<https://devfeed.tech/tags/front-end-development.md>), [git](<https://devfeed.tech/tags/git.md>), [javascript](<https://devfeed.tech/tags/javascript.md>), [pull-requests](<https://devfeed.tech/tags/pull-requests.md>)

### AI overview

A personal account of learning front-end development while contributing to the TextSecure Chrome Browser Extension. The author describes using Backbone.js, Grunt, Bower, Mustache, Git, and pull requests while separating phone-number input into a reusable Backbone.js view and validating it across multiple HTML pages.

### Source excerpt

Winter Break Of Code Day 2 Because I might get sappy, here's a picture to ease that before I let it all out. After being promptly woken up by numerous roosters at 7:30 AM, I still can't believe I'm here. My application was pretty last-minute, completed when I was in a state of droopiness and scholarship-application-hyperdrive. But I got on a plane from the Midwest, went from cloudy, 20 degrees with windchill making it feel like 0 to sunny, 77 degrees with mild winds making it feel still 77 degrees. Read more...