Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I am trying to check if I installed a malicious chrome extension which can steal credit card data. That may be some extension that has an access to all data on all sites. chrome:://extensions does not seem to have this data. How can I check which data is available to google chrome extension?

share|improve this question
1  
When you install an extension Chrome will indicate what it can access. –  Ramhound Jan 17 '13 at 16:10

1 Answer 1

up vote 0 down vote accepted

That may be some extension that has an access to all data on all sites.

The premise that extension requests permissions and hence can steal your data is false. Having said that, if you want to check the permissions, then while installing you get a list of things the Extension can access.

To review this post installation, Head over to the Extensions page, chrome://extensions.

enter image description here

Click on the "Visit Website" & then on the details tab.

enter image description here

You'll see the permissions listing on the lower right corner.

enter image description here.

Another way is to head over to %localappdata%\Google\Chrome\User Data\Default\Extensions\id where id is the id below the extension(to show the id, Developer mode tickbox must be checked. From this folder, you can examine the manifest file to see what it requests. Of course, you can go one step further & just examine the entire extension source code itself.

share|improve this answer
1  
Why is my premise false? "The premise that extension requests permissions and hence can steal your data is false." If the extension has access to all data on all web-sites therefore it can access my credit-card data, right? Therefore it can transfer this data to own server. Where is the mistake? –  Ayrat Jan 18 '13 at 13:34

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.