Browse Definitions :
Definition

browser extension

A browser extension is a small software application that adds a capacity or functionality to a web browser. A browser extension, also called a plug-in, can take advantage of the same application program interfaces (APIs) that JavaScript can on a web page, but the extension can do more because it also has access to its own set of APIs.

While extensions are typically used to add features and enhance the functionality of a website, they can also be used to remove unwanted website elements such as pop-up ads and features such as auto-play for online videos.

Here are a few examples of browser extensions:

  • AdBlock - enables content filtering and ad blocking.
  • HTTPS Everywhere - provides another layer of security by making websites that support the extension automatically connect through HTTPS.
  • StayFocusd - limits the amount of time the user is allowed to spend on designated websites.
  • Highly - allows the user to highlight webpage text and share it through social media, email, Slack or iMessage.

Browser extensions are usually written in HTML, CSS or JavaScript. Like other types of software, browser extensions can be coded for undesirable behaviors and be misused to deliver malware. Though most add-ons are reviewed prior to being listed, malicious extensions that violate browser developer program policies are not uncommon.

For example, in January 2018, it a security company called ICEBERG reported that four malicious extensions available from the Chrome Web Store were designed to conduct click fraud and black hat SEO. In 2017, Proofpoint reported that eight compromised Chrome extensions had sent malicious code to almost four and a half million users.

When deciding whether or not to install an extension, always keep in mind the type of resources the extension can access and where it will send the data it collects. Treat with extreme caution any extensions that do any of the following:

  • Interact with local files
  • Interact with the Windows Registry
  • Interact with cookies
  • Access any browser tab or window
  • Execute commands in the user's shell
This was last updated in February 2018

Continue Reading About browser extension

SearchCompliance

  • compliance risk

    Compliance risk is an organization's potential exposure to legal penalties, financial forfeiture and material loss, resulting ...

  • information governance

    Information governance is a holistic approach to managing corporate information by implementing processes, roles, controls and ...

  • enterprise document management (EDM)

    Enterprise document management (EDM) is a strategy for overseeing an organization's paper and electronic documents so they can be...

SearchSecurity

  • denial-of-service attack

    A denial-of-service (DoS) attack is a security event that occurs when an attacker makes it impossible for legitimate users to ...

  • information security (infosec)

    Information security, often shortened to infosec, is the practice, policies and principles to protect data and other kinds of ...

  • user authentication

    User authentication verifies the identity of a user attempting to gain access to a network or computing resource by authorizing a...

SearchHealthIT

SearchDisasterRecovery

  • risk mitigation

    Risk mitigation is a strategy to prepare for and lessen the effects of threats faced by a business.

  • call tree

    A call tree is a layered hierarchical communication model that is used to notify specific individuals of an event and coordinate ...

  • Disaster Recovery as a Service (DRaaS)

    Disaster recovery as a service (DRaaS) is the replication and hosting of physical or virtual servers by a third party to provide ...

SearchStorage

  • cloud storage

    Cloud storage is a service model in which data is transmitted and stored on remote storage systems, where it is maintained, ...

  • cloud testing

    Cloud testing is the process of using the cloud computing resources of a third-party service provider to test software ...

  • storage virtualization

    Storage virtualization is the pooling of physical storage from multiple storage devices into what appears to be a single storage ...

Close