Chrome Ad Blocker with 10M+ Installs Found with Dormant Script Injection Capability

Summary

An analysis of a popular Google Chrome ad block extension for YouTube has uncovered the ability to execute arbitrary JavaScript code. According to Island, the extension, named Adblock for YouTube (ID: cmedhionkhpnakcndndgjdbohmhepckk), has more than 10 million installs and carries a Featured badge on the Chrome Web Store. The extension description states that it allows users to prevent web

Lotu Radar provides attributed news summaries and links to the original publisher. Full reporting and copyright remain with the source.