Chrome Extensions can Edit HTTP Requests

Did you know that chrome extensions can intercept HTTP requests? Almost every website online uses a set techniques called AJAX

Video

Transcript

Did you know that chrome extensions can intercept HTTP requests?

Almost every website online uses a set techniques called AJAX

Asynchronous

JavaScript

And

XML

They use it to show you different content stored on their servers without reloading the page

Browser plugins can see and change information sent in that manner

For example, let’s say you’re editing contact information in a CRM

That CRM sends requests to their servers about changes you make

A chrome extension can intercept that request, read information in it,

Replace and add new data, or even delete it completely

Same goes for information received from the CRM’s backend

This can be quite dangerous so you must trust the developers of the extension you’re using to use this power responsibly

This can also be very useful for scraping information from a page because data sent in these requests is structured JSON

While data rendered on the page is plain HTML which, sometimes, can be hard to parse.