Rogue websites can turn vulnerable browser extensions into back doors

A researcher has found that websites can use some extensions to bypass security policies, execute code, and even install other extensions.

from Naked Security http://bit.ly/2AXOhLM
via IFTTT