CODEWITHSUNDEEP
securitygoogle-chrome-extension
Max
Max

Reputation: 5081

Blocking Chrome Extensions from running on my site

As a web developer, is there any way to prevent a user's Chrome extensions from being applied to my site? i.e. a header, meta tag, anything? Additionally, if there is, is there also a way to whitelist particular extensions?

Upvotes: 10

Views: 7620

Answers (2)

Vergus
Vergus

Reputation: 21

Can't you create a Content Security Policy (CSP) and block inline javascript and only allow javascript from specific domains? You could even create a CSP in report-only mode and collect violation reports via something like https://report-uri.io/

Upvotes: 1

Michael Slade
Michael Slade

Reputation: 13877

It's not possible. At the web server end, you are only only able to control what the browser will allow you to control. In simple terms, this means you can control the data (HTML, javascript, headers etc) that you send back to it. That's about it.

Upvotes: 8

Related Questions