Collected research

Protecting Browsers from Extension Vulnerabilities

Adam Barth, Adrienne Porter Felt, Prateek Saxena and Aaron Boodman · ndss-symposium.org

Manual review of 25 popular Firefox extensions found only 3 needed full privileges while 19 used interfaces more powerful than their features required. A Datalog deduction over 613 labelled XPCOM interfaces mapped 147 upward edges where privilege escalation is reachable.

Record

Researcher

Adam Barth, Adrienne Porter Felt, Prateek Saxena and Aaron Boodman

Published by

ndss-symposium.org

Topic

Browser

In the archive

• Collected in the 2010 research round

Tags

• browser-extension
• measurement-study
• privilege-escalation
• sandbox-escape
• javascript
• static-analysis
• mitigation
• defence
• same-origin-policy
• owasp-a01-2021

This page is the archive's own catalogue record. The research is the work of Adam Barth, Adrienne Porter Felt, Prateek Saxena and Aaron Boodman, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 14 August 2026.