Browser extension

A browser extension is a plug-in that extends the functionality of a web browser in some way. Some extensions are authored using web technologies such as HTML, JavaScript, and CSS.[1] Browser extensions can change the user interface of the web browser without directly affecting viewable content of a web page; for example, by adding a "toolbar."

History

Internet Explorer started supporting extensions from version 5 released in 1999.[2] Firefox has supported extensions since its launch in 2004. The Opera desktop web browser supported extensions from version 10 released in 2009. Google Chrome started supporting extensions from version 4 released in 2010. The Safari web browser started supporting native extensions from version 5 released in 2010. Microsoft Edge started supporting limited extensions in March 2016.[3][4]

The syntax for extensions may be quite different from browser to browser, or at least different enough that an extension working on one browser does not work on another. As for search engine tools, an attempt to bypass this problem is the multitag strategy proposed by the project Mycroft, a database of search engine addons working on different browsers.[5]

Installation

Many browsers have an online "store" that allow users to find extensions and see lists of popular extensions. For example, Google Chrome,[6] Firefox,[7] and Safari.[8] all provide such stores, together with unofficial stores.[9][10]

Functions

Browser extensions are used for a number of purposes.

Toolbars

Main article: Browser toolbar

A browser toolbar is a toolbar that resides within a browser's window. All major web browsers provide support to browser toolbar development as a way to extend the browser's GUI and functionality. Browser toolbars are considered to be a particular kind of browser extensions that present a toolbar. Browser toolbars are specific to each browser, which means that a toolbar working on a browser does not work on another one.

Other plug-ins

In addition to toolbars, browser extensions add specific abilities into browsers using application programming interfaces (APIs) allowing third parties to create plug-ins that interact with the browser. The original API was NPAPI, but subsequently Google introduced the PPAPI interface in Chrome.

Privacy

Browser extensions can help protect your online privacy far beyond the private browsing feature available on most browsers. There are many types of extensions that can be used to control various aspects of your browsing privacy and can mitigate threats. Most of the browser extensions related to privacy fall into three groups: extensions that prevent third parties from tracking your movements, extensions that block ads and scripts, and passive security tools that enforce good habits.[11]

Development

Browser extension development is the actual creation of an extension for a specific browser. Each browser type has its own architecture and APIs to build the extensions which requires different code and skills for each extension. Nowadays there are development frameworks which allows developers to build cross-browser extensions with only one code base and one API, eliminating the need to develop a different extension version for each one of the Browsers. Examples of those frameworks are Add-ons Framework which allows developer to build cross browser extensions for Internet Explorer, Firefox, Chrome, Safari and Opera,[12] and the Crossrider development framework which allows developers to build cross browser extensions for Internet Explorer, Firefox, Chrome and Safari.[13]

Extension Maker [14] is another one interesting tool for cross browser extensions development. Opposite above two, you don't need to write any code. You can develop an extension from preexisting blocks.

Unwanted behavior

Browser extensions have access to everything done by the browser, and can do things like inject ads into webpages, or make "background" HTTP requests to a third-party server. This power can be abused by browser extensions; while Web pages are constrained by the security model of the Web (in particular, the same-origin policy), extensions are not.

As a result, a browser extension may not behave as described, and take action against the interest of the user that installed it. Such browser extensions are a form of Malware. Some software downloads come with unwanted bundled programs that install browser extensions without a user's knowledge, while making it hard for the user to uninstall the add-on.[15]

In 2012, a security researcher "developed a remote-controlled piece of malware that functions as a browser extension and is capable of modifying Web pages, downloading and executing files, hijacking accounts, bypassing two-factor authentication security features enforced by some websites, and much more." [16]

In May 2013, Microsoft reported discovering a browser extension for Chrome and Firefox that "tries to hijack Facebook profiles" in Brazil.[17]

Some Google Chrome extension developers have sold extensions they made to third-party companies who silently push unwanted updates that incorporate previously non-existent adware into the extensions.[18][19] In January 2014, Google removed two extensions from its browser service Chrome due to violations of its own terms of service. The decision to remove the two extensions, "Add to Feedly" and "Tweet This Page", arose when users noticed these extensions created unwanted pop up ads, after the extensions had been sold by their developers to third parties.[20]

Five percent of computer browser visits to Google owned websites are altered by computer programs that inject their own ads into pages.[21][22][23] Researchers have identified 50,870 Google Chrome extensions and 34,407 programs that injected ads. Thirty-eight percent of extensions and 17 percent of programs were catalogued as malicious software, the rest being potentially unwanted adware-type applications.

See also

References

  1. ↑ "What are extensions?". Retrieved 18 February 2014.
  2. ↑ "Browser Extensions". Retrieved 2010-06-05.
  3. ↑ Bright, Peter (18 March 2016). "Edge browser now has extensions in the latest Windows 10 preview". Ars Technica. Condé Nast.
  4. ↑ Foley, Mary Jo (17 March 2016). "Microsoft releases first Edge extensions preview in newest Windows 10 test build". ZDNet. CBS Interactive.
  5. ↑ "Mycroft project". Retrieved 2011-10-27.
  6. ↑ "Chrome Web Store". Retrieved 15 March 2014.
  7. ↑ "Mozilla Firefox Add-ons". Retrieved 15 March 2014.
  8. ↑ "Safari Extensions". Retrieved 15 March 2014.
  9. ↑ Eg: "Safari Add-ons". Retrieved 1 March 2015.
  10. ↑ "Opera Extensions". Retrieved 1 March 2015.
  11. ↑ "LifeHacker".
  12. ↑ "Add-ons Framework". Retrieved 19 December 2013.
  13. ↑ "Crossrider". Retrieved 28 April 2013.
  14. ↑ "Extension Maker". Retrieved 13 October 2013.
  15. ↑ "PUP Criteria". Malwarebytes. Retrieved 13 February 2015.
  16. ↑ "Researcher to demonstrate feature-rich malware that works as a browser extension". Retrieved 15 March 2015.
  17. ↑ "Browser extension hijacks Facebook profiles". Retrieved 15 March 2015.
  18. ↑ "Adware vendors buy Chrome Extensions to send ad- and malware-filled updates". Ars Technica. Retrieved 20 January 2014.
  19. ↑ Bruce Schneier (21 Jan 2014). "Adware Vendors Buy and Abuse Chrome Extensions".
  20. ↑ Winkler, Rolfe. "Google Removes Two Chrome Extensions Amid Ad Uproar". blogs.wsj.com. Wall Street Journal. Retrieved 17 March 2014.
  21. ↑ "Ad Injection at Scale: Assessing Deceptive Advertisement Modifications" (PDF).
  22. ↑ http://www.pcworld.com/article/2920012/superfish-injects-ads-in-one-in-25-google-page-views.html
  23. ↑ http://www.cio.com.au/article/574450/superfish-injects-ads-one-25-google-page-views/

External links

This article is issued from Wikipedia - version of the Monday, May 02, 2016. The text is available under the Creative Commons Attribution/Share Alike but additional terms may apply for the media files.