Browse Definitions:
Definition

browser extension

Contributor(s): Ivy Wigmore

A browser extension is a small software application that adds a capacity or functionality to a web browser. A browser extension, also called a plug-in, can take advantage of the same application program interfaces (APIs) that JavaScript can on a web page, but the extension can do more because it also has access to its own set of APIs.

While extensions are typically used to add features and enhance the functionality of a website, they can also be used to remove unwanted website elements such as pop-up ads and features such as auto-play for online videos.

Here are a few examples of browser extensions:

  • AdBlock - enables content filtering and ad blocking.
  • HTTPS Everywhere - provides another layer of security by making websites that support the extension automatically connect through HTTPS.
  • StayFocusd - limits the amount of time the user is allowed to spend on designated websites.
  • Highly - allows the user to highlight webpage text and share it through social media, email, Slack or iMessage.

Browser extensions are usually written in HTML, CSS or JavaScript. Like other types of software, browser extensions can be coded for undesirable behaviors and be misused to deliver malware. Though most add-ons are reviewed prior to being listed, malicious extensions that violate browser developer program policies are not uncommon.

For example, in January 2018, it a security company called ICEBERG reported that four malicious extensions available from the Chrome Web Store were designed to conduct click fraud and black hat SEO. In 2017, Proofpoint reported that eight compromised Chrome extensions had sent malicious code to almost four and a half million users.

When deciding whether or not to install an extension, always keep in mind the type of resources the extension can access and where it will send the data it collects. Treat with extreme caution any extensions that do any of the following:

  • Interact with local files
  • Interact with the Windows Registry
  • Interact with cookies
  • Access any browser tab or window
  • Execute commands in the user's shell
This was last updated in February 2018

Continue Reading About browser extension

Start the conversation

Send me notifications when other members comment.

By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Please create a username to comment.

-ADS BY GOOGLE

File Extensions and File Formats

Powered by:

SearchCompliance

  • risk map (risk heat map)

    A risk map, also known as a risk heat map, is a data visualization tool for communicating specific risks an organization faces.

  • internal audit (IA)

    An internal audit (IA) is an organizational initiative to monitor and analyze its own business operations in order to determine ...

  • pure risk (absolute risk)

    Pure risk, also called absolute risk, is a category of threat that is beyond human control and has only one possible outcome if ...

SearchSecurity

  • FIDO (Fast Identity Online)

    FIDO (Fast ID Online) is a set of technology-agnostic security specifications for strong authentication. FIDO is developed by the...

  • cryptanalysis

    Cryptanalysis is the study of ciphertext, ciphers and cryptosystems with the aim of understanding how they work and finding and ...

  • Trojan horse (computing)

    In computing, a Trojan horse is a program that appears harmless, but is, in fact, malicious.

SearchHealthIT

SearchDisasterRecovery

  • business continuity and disaster recovery (BCDR)

    Business continuity and disaster recovery (BCDR) are closely related practices that describe an organization's preparation for ...

  • business continuity plan (BCP)

    A business continuity plan (BCP) is a document that consists of the critical information an organization needs to continue ...

  • call tree

    A call tree -- sometimes referred to as a phone tree -- is a telecommunications chain for notifying specific individuals of an ...

SearchStorage

  • cloud SLA (cloud service-level agreement)

    A cloud SLA (cloud service-level agreement) is an agreement between a cloud service provider and a customer that ensures a ...

  • wear leveling

    Wear leveling is a process that is designed to extend the life of solid-state storage devices.

  • storage area network (SAN)

    A storage area network (SAN) is a dedicated high-speed network or subnetwork that interconnects and presents shared pools of ...

SearchSolidStateStorage

  • hybrid hard disk drive (HDD)

    A hybrid hard disk drive is an electromechanical spinning hard disk that contains some amount of NAND Flash memory.

Close