It’s great that you can make an extension only have data access on click or on certain domains. However, many extensions still shadily get full browser history even with those former restrictions AND there’s no way to toggle that off
Adding all of the following from another extensions issue:
Correct; and also why, both you and Brave Support have requested a list of extensions used. (Thank you.)
Extensions Testing Steps:
- test by disabling all extensions
- test by enabling each extension individually
- test by uninstalling all extensions
- test by installing each extension individually
- test order of installation of extensions
- test combinations of extensions
Example of good detective work by a member of the Brave Community:
- Original Post: ‘Anylist extension non-responsive on Brave Desktop’
- Findings and solution: ‘Anylist extension non-responsive on Brave Desktop - #4 by bencro99’
Example of hostile / malicious / malware / persistent extension named “C2Ext”
- Original Post: ‘Weird extension in my browser’
- Warnings and assistance made by Brave Support, are in a number of posts. Anti-malware might not detect, but extension is able to download persistent malware.
- Details about the “C2Ext” extension: ‘Weird extension in my browser - #16 by TlapAndSickle’
About: Automatically Update Extensions, and toggling the brave-user-extension-auto-update flag to “Disabled” via ‘brave://flags’ …
While this provides global control similar to Firefox, it currently does not support per-extension toggles.
Users requesting granular control (e.g., disabling updates for specific extensions while keeping others on auto-update) have submitted feature requests, but the current implementation applies to all user-installed extensions globally.