Chrome extension
Chrome extension security
Secure authentication, uploads, permissions and message passing.
Least privilege
Request only the browser permissions required by the feature set.
Secrets
Never embed permanent API keys or object-storage credentials in extension bundles.