Stop using global variables in extensions

Adfly Skipper defines a property on window, called source. It’s only used for internal purposes.

France’s IRS, in its decade-old authentication code, stores information in window.source.

I’ve been using Private Browsing to file my taxes for years because I couldn’t get that website to work, but I finally took the time to bisect my installed extensions and debug the site. If you’re French and doesn’t work, try uninstalling AdFly Skipper.

This post paid for by the No Global State gang.

This post is licensed under CC BY 4.0 by the author.