5 ms·
> Benefits of the Manifest V3: none V3 not allowing remote code execution is actually a serious benefit. Of course, this does not negate the fact that V3 is ma
by dedoussis 4y ago
> Benefits of the Manifest V3: none
V3 not allowing remote code execution is actually a serious benefit. Of course, this does not negate the fact that V3 is mainly there to boost the ad ecosystem of Google, but I'd never want my screen casting extension to be mining bitcoin on the background. That said, I'm not sure how this is going to scale long term, given that it sometimes takes 2+ weeks for the web store review team to approve a genuine one-line change. Lack of RCE is only going to make this review backlog bigger.
- rasz 4y ago>V3 not allowing remote code execution is actually a serious benefit. This is Google Kool-Aid. When Google says "remote code", they mean _remote to google_. Your own script on your own drive is remote to google. Google is removing User from the User Agent.
- dedoussis 4y agoWell, in this instance remote code actually means remote. In V3 one can no longer use the tabs.executeScript API [1] in which you could pass an arbitrary server rendered string. [1] https://developer.chrome.com/docs/extensions/reference/tabs/#method-executeScript https://developer.chrome.com/docs/extensions/reference/tabs/...
- rasz 4y agoV3 kills Userscripts (tampermonkey/violentmonkey). You will no longer be able to execute your own code written with your own hands&brain and stored on your own hard drive.
- abraham 4y agoUserscripts should go into testing soon. https://developer.chrome.com/docs/extensions/mv3/known-issues/#userscript-managers-support https://developer.chrome.com/docs/extensions/mv3/known-issue...
- danbulant 4y agoYou can make your own local extension. People will just write easy tool to generate an extension out of userscript(s). Still not good that they removed that...
- xani_ 4y agoI'd bet FAR more people got infected by malicious ads than "some site cajoled them into running an extension" > but I'd never want my screen casting extension to be mining bitcoin on the background You'd "just" get ads or sites doing it
- jerrygoyal 4y ago> V3 not allowing remote code execution is actually a serious benefit. not true. they're going to allow RCE now. > given that it sometimes takes 2+ weeks for the web store review Not true at least in my experience. Approval takes around 2-4 days max for my extension.
- dedoussis 4y agoI'd say 2-4 days is the median. There have been 2 instances of me needing to wait 2 weeks for a one-liner.
- deleted 4y ago[deleted]
- josephcsible 4y agoDisallowing remote code by default could be considered a benefit, but disallowing me from saying "I trust this one particular source of remote code; please let it execute" is most definitely not.