top | item 36245525

(no title)

Do you suppose it's possible that accessing the DOM to add a div implicitly requires access to page data?

discuss

I can see how many applications might want to read the page, but in my case it's not necessary. My extension tries to add a <div> under the <body> element, regardless of what's going on in the page. If there's no <body>, my extension stops working but the browser keeps going.

In short, if there were separate "read" and "write" permissions, I would only need "write". For privacy-concerned people, that's a very important distinction.

jabradoodle|2 years ago

It would be more complex than that given you can write arbitrary JavaScript that can read anything it likes and send it anywhere.