Developers’ Insight on Manifest v3 Privacy and Security Webextensions

dc.contributor.authorPolčák, Liborcs
dc.contributor.authorMaone, Giorgiocs
dc.contributor.authorMcMahon, Michaelcs
dc.contributor.authorBednář, Martincs
dc.date.accessioned2025-10-24T09:05:10Z
dc.date.available2025-10-24T09:05:10Z
dc.date.issued2025-10-21cs
dc.description.abstractWebextensions can improve web browser privacy, security, and user experience. The APIs offered by the browser to webextensions affect possible functionality. Currently, Chrome transitions to a modified set of APIs called Manifest v3. This paper studies the challenges and opportunities of Manifest v3 with an indepth structured qualitative research. Even though some projects observed positive effects, a majority express concerns over limited benefits to users, removal of crucial APIs, or the need to find workarounds. Our findings indicate that the transition affects different types of webextensions differently; some can migrate without losing functionality, while others remove functionality or decline to update. The respondents identified several critical missing APIs, including reliable APIs to inject content scripts, APIs for storing confidential content, and others.en
dc.description.abstractWebextensions can improve web browser privacy, security, and user experience. The APIs offered by the browser to webextensions affect possible functionality. Currently, Chrome transitions to a modified set of APIs called Manifest v3. This paper studies the challenges and opportunities of Manifest v3 with an indepth structured qualitative research. Even though some projects observed positive effects, a majority express concerns over limited benefits to users, removal of crucial APIs, or the need to find workarounds. Our findings indicate that the transition affects different types of webextensions differently; some can migrate without losing functionality, while others remove functionality or decline to update. The respondents identified several critical missing APIs, including reliable APIs to inject content scripts, APIs for storing confidential content, and others.en
dc.description.embargo2025-11-01cs
dc.formattextcs
dc.format.extent15-26cs
dc.format.mimetypeapplication/pdfcs
dc.identifier.citationPrivacy Enhanced Technologies Symposium 2025. 2025, p. 15-26.en
dc.identifier.doi10.5220/0000205700003985cs
dc.identifier.isbn978-989-758-772-6cs
dc.identifier.orcid0000-0001-9177-3073cs
dc.identifier.orcid0000-0002-3661-6590cs
dc.identifier.other193343cs
dc.identifier.researcheridKHY-6052-2024cs
dc.identifier.scopus34977406900cs
dc.identifier.scopus57851157600cs
dc.identifier.urihttps://hdl.handle.net/11012/255598
dc.language.isoencs
dc.publisherSCITEPRESS – Science and Technology Publications, Lda.cs
dc.relation.ispartofPrivacy Enhanced Technologies Symposium 2025cs
dc.relation.urihttps://www.insticc.org/node/TechnicalProgram/webist/2025/presentationDetails/136690cs
dc.rightsCreative Commons Attribution-NonCommercial-NoDerivatives 4.0 Internationalcs
dc.rights.accessembargoedAccesscs
dc.rights.urihttp://creativecommons.org/licenses/by-nc-nd/4.0/cs
dc.subjectWebextensionsen
dc.subjectManifest v3en
dc.subjectprivacyen
dc.subjectsecurityen
dc.subjectweb browsersen
dc.subjectsurvey among developersen
dc.subjectWebextensions
dc.subjectManifest v3
dc.subjectprivacy
dc.subjectsecurity
dc.subjectweb browsers
dc.subjectsurvey among developers
dc.titleDevelopers’ Insight on Manifest v3 Privacy and Security Webextensionsen
dc.title.alternativeDevelopers’ Insight on Manifest v3 Privacy and Security Webextensionsen
dc.type.driverconferenceObjecten
dc.type.statusPeer-revieweden
dc.type.versionacceptedVersionen
sync.item.dbidVAV-193343en
sync.item.dbtypeVAVen
sync.item.insts2025.10.24 11:05:09en
sync.item.modts2025.10.24 10:33:12en
thesis.grantorVysoké učení technické v Brně. Fakulta informačních technologií. Ústav informačních systémůcs
Files