DevThe Hacker Newsabout 5 hours ago
Chrome Ad Blocker with 10M+ Installs Has Hidden Script Injection
1 min read
Adblock for YouTube, a Chrome extension with over 10 million installs, contains the ability to execute arbitrary JavaScript code on any website. Researchers Oleg Zaytsev and Shachar Gritzman found the capability could be activated by a server-side change without an extension update or store review. No malicious payload has been distributed yet.
Level
Hype check
Tap to vote and see what everyone thinks.
