truster

Prevent the rendered web-pages from loading resources hosted in untrusted, writable S3 buckets.

What is truster?

truster is a Chrome extension developed by conand, and its main feature is "Prevent the rendered web-pages from loading resources hosted in untrusted, writable S3 buckets.".

Extension Screenshots

screenshot

Download truster Extension CRX File

Download truster extension files in crx format, manually install Chrome extensions in the browser, or share the crx files with friends to easily install Chrome extensions.

Extension Usage Instructions

                        Websites often load assets (CSS, JS,..) hosted in AWS S3 buckets. Unfortunately, sometimes such buckets are misconfigured allowing unauthorized users to overwrite their files. This results in the possibility for attackers to inject malicious content (for instance malicious cryptomining JS) that gets delivered to the website's visitors. To protect from this threat, truster, communicating with our backend (https://bucketsec.necst.it/), verifies if the resources requested from the visited websites come from an untrusted, writable, bucket, preventing the loading of such resources.                    

Extension Basic Information

Name truster truster
ID eiiilcdomkafolppehfkjdaflcblakml
Official URL https://chromewebstore.google.com/detail/truster/eiiilcdomkafolppehfkjdaflcblakml
Description Prevent the rendered web-pages from loading resources hosted in untrusted, writable S3 buckets.
File Size 22.08 KB
Installation Count 2,224
Current Version 0.1
Last Updated 2018-12-22
Publish Date 2018-12-17
Rating 5.00/5 Total 1 Ratings
Developer conand
Payment Type free
Extension Website https://bucketsec.necst.it/
Supported Languages en
manifest.json
{
    "update_url": "https:\/\/clients2.google.com\/service\/update2\/crx",
    "name": "truster",
    "version": "0.1",
    "description": "Prevent the rendered web-pages from loading resources hosted in untrusted, writable S3 buckets.",
    "content_security_policy": "default-src 'self'; connect-src https:\/\/bucketsec.necst.it; style-src https:\/\/maxcdn.bootstrapcdn.com\/bootstrap\/",
    "permissions": [
        "storage",
        "webRequest",
        "webRequestBlocking",
        "webNavigation",
        ""
    ],
    "icons": {
        "16": "imgs\/icon_16.png",
        "32": "imgs\/icon_32.png",
        "48": "imgs\/icon_48.png",
        "128": "imgs\/icon_128.png"
    },
    "background": {
        "scripts": [
            "src\/background.js",
            "src\/sha256.min.js"
        ]
    },
    "browser_action": {
        "default_icon": "imgs\/icon_16.png",
        "default_popup": "src\/popup.html",
        "default_title": "View blocked S3 resources"
    },
    "options_ui": {
        "page": "src\/options.html",
        "open_in_tab": false
    },
    "manifest_version": 2
}