Google is preparing to reintroduce the userScripts API for Chrome extensions. This feature was previously available in Manifest V2 but was removed in Manifest V3. It has now been reinstated, but with several additional limitations. The key point is that users must enable developer mode in order to use this feature.
The userScript API allows Chrome extensions to load and run scripts, enabling widespread script sharing. This includes customizing websites, changing web themes, or removing advertisements. However, these scripts present a serious security vulnerability, as users may unwittingly download malicious scripts to run on websites. While the extension itself may not be malicious, Google is unable to verify the scripts being used. The Chrome team acknowledges that this API adds features to Manifest V3 but must be careful to prioritize security by limiting its usage.
This feature has now been added to Chrome 120 Beta.
TLDR: Google is reintroducing the userScripts API for Chrome extensions, allowing widespread script sharing. However, the security risks associated with running these scripts must be carefully managed. This feature is now available in Chrome 120 Beta.
Source: Chrome Developer, chrome-extensions
Leave a Comment