Or maybe only install extensions from trusted sources developers.

Firefox will disable extensions in private mode if you want to

I think i remember a post not to far back with a similar topic. Not sure if it was from the developer of the hooverzoom extension itself, but it definitly referenced some offers they collected.

edit: just noticed, that the article also references the offers (ref. https://github.com/extesy/hoverzoom/discussions/670 )

To add to the blog post, if you use user scripts, utilize your manager's blacklist and learn REGEX.

If needed, use Group Policy, Regedit or .plists on macOS to blacklist domains to prevent an extension from running on them. As an example, I use Shutup.css to block comments online, but on something like Lemmy, I want to see comments as that's primarily how content is created and adding it to my extension domain blacklist prevents the extension from running on the website or any lemmy domains.

It’s interesting to read as I never thought about the vulnerability these extensions are.

I guess you should limit the number of extensions you have.

Exactly why most enterprise organizations disable them. You should too if you’re doing anything sensitive data.

I thought my ISP already had this data and is selling it. Should I go make sure all my extensions are 100% kosher?