Title: Introducing QuaranTab: Companion extension to quarantine tabs so you can safely use them offline with private data<p>I find myself wanting to use online format parsers to quickly decode that production JWT or decode a base64 Authorization header but cannot trust these websites to not leak my information. I thought to myself if only I could cut-off network access to this site, use it offline, and then throw away all browsing data. So I created an extension just for that.<p>It uses Firefox contextual identities API (Containers) to isolate browsing data and inter-tab communication. Once the site is fully loaded, I then inject bogus proxy settings for any requests leaving that container to effectively cut-off network access. And once I&#x27;m done, I simply delete the Container.<p>Use Cases:<p>* Parse a live JWT token<p>* Convert a Base64 Authorization header<p>* Hash a password<p>* Parse a Protobuf message<p>* Submit my name and birthdate to estimate my date of death<p>Check out the MIT source code on GitHub [1] and install QuaranTab from the Firefox store [2]. If anyone is interested in a discussion, I&#x27;d love to chat about:<p>1. Any ideas on how we could implement this in Chromium? Using private window as a &quot;Container&quot;?<p>2. Can you come up with an exploit? I posted a 100usd bug bounty [3] if you find one!<p>3. Is there any way to prove an extension in the store was built from source in GitHub? I am imagining some kind of third-party escrow service managing the Firefox store account and building from specific public git repository.<p>1. <a href="https:&#x2F;&#x2F;github.com&#x2F;matusfaro&#x2F;quarantab">https:&#x2F;&#x2F;github.com&#x2F;matusfaro&#x2F;quarantab</a><p>2. <a href="https:&#x2F;&#x2F;addons.mozilla.org&#x2F;en-US&#x2F;firefox&#x2F;addon&#x2F;quarantab&#x2F;" rel="nofollow noreferrer">https:&#x2F;&#x2F;addons.mozilla.org&#x2F;en-US&#x2F;firefox&#x2F;addon&#x2F;quarantab&#x2F;</a><p>3. <a href="https:&#x2F;&#x2F;github.com&#x2F;matusfaro&#x2F;quarantab#bug-bounty">https:&#x2F;&#x2F;github.com&#x2F;matusfaro&#x2F;quarantab#bug-bounty</a>
Upvote: