Google Bans JSONView – Extension Contains a Serious Security Vulnerability

by mboroi • 10 years ago

24 13 10 years ago

mboroi6• 10 years ago

I attempted to load something and realized the extension I had just previously been using stopped working. [screenshot of the disabled extension](http://imgur.com/jBmnwf4)

mboroi6• 10 years ago

The link from Ben Hollis's site, https://jsonview.com/, to the Alternative/Unofficial JSONView for Chrome 404's.

theSquid• 10 years ago

Do we have more information about this? Is Google correct and should we switch to something else?

mboroi6• 10 years ago

The work must go on. I ended up installing JSON Formatter. Appears potentially abandoned though.

source: https://github.com/callumlocke/json-formatter extension: https://chrome.google.com/webstore/detail/json-formatter/bcj...

elgaricimo• 10 years ago

Annoying...doesn't seem to be working on firefox either... for the time being, use this as a work around http://codebeautify.org/jsonviewer ...

5aurabh• 10 years ago

But it's still available on chrome web store https://chrome.google.com/webstore/detail/jsonview/nckmconeh...

mboroi6• 10 years ago

It seems this version by Ark may have been a copy, in their description they point to the "original", https://chrome.google.com/webstore/detail/jsonview/chklaanhf..., which directs to the version claimed to have a security vulnerability and appears to have been pulled.

0xkd• 10 years ago

Decent alternative https://chrome.google.com/webstore/detail/json-viewer/gbmdgp...

rhodrid• 10 years ago

I'd really like to know more information about the vulnerability but can't seem to find anything online.

mboroi6• 10 years ago

mjamin opened a bug on GitHub, perhaps we'll get an update from Ben or a contributor. https://github.com/bhollis/jsonview/issues/135

tobiasjordans• 10 years ago

This git repo is the repo of the firefox extension. I opened the same ticket for the chrome version https://github.com/gildas-lormeau/JSONView-for-Chrome/issues...

jnylen• 10 years ago

Info about this issue including a test case: https://github.com/gildas-lormeau/JSONView-for-Chrome/issues...

I started using "JSON Formatter" instead ( https://chrome.google.com/webstore/detail/json-formatter/bcj... ) and it seems to work fine.

Google Bans JSONView – Extension Contains a Serious Security Vulnerability

Related Stories