6 ms·
> isTrusted can apparently be spoofed isTrusted cannot be spoofed in this situation, which is its intended use in Chrome. A Chrome extension in the isolated wo
by DrewHintz 11y ago
> isTrusted can apparently be spoofed
isTrusted cannot be spoofed in this situation, which is its intended use in Chrome. A Chrome extension in the isolated world is receiving events from the main world and checking isTrusted for those events.
- level3 11y agoThanks for the clarification. I assume the spoofability applies only to JS in the main world then? And extensions can receive the event before a script has a chance to fiddle with it? Sorry for the questions, just trying to figure out how this all works, and Googling doesn't give me a clear answer.