Link copied 
Google is implementing stricter rules for Chrome extension developers – a move that should help reduce the risk of cryptojacking and hacks, CoinDesk reported.
In an online post on Monday, the search engine giant announced a number of upcoming changes which include user controls for host permissions, changes to extensions review process, new code readability requirements, and more.
“It’s crucial that users be able to trust the extensions they install are safe, privacy-preserving, and performant. Users should always have full transparency about the scope of their extensions’ capabilities and data access,” it said.
The new changes will be implemented in Chrome 70, which is currently in beta. With this, users will have the option to choose “to restrict extension host access to a custom list of sites, or to configure extensions to require a click to gain access to the current page.”
Google said that the move is aimed at improving user transparency and control over when extensions are able to access site data.
Furthermore, extensions that request powerful permissions will be subject to an additional compliance review, it said, adding that it is closely looking at extensions that use remotely hosted code, with ongoing monitoring.
Google further said that Chrome Web Store will no longer allow extensions with obfuscated code, which includes code within the extension package as well as any external code or resource fetched from the web.
“This policy applies immediately to all new extension submissions. Existing extensions with obfuscated code can continue to submit updates over the next 90 days, but will be removed from the Chrome Web Store in early January if not compliant,” it added.
In addition, all extension developer accounts will be required to be protected by 2-step verification to lower the risk of hackers taking over an account from next year.
The announcement follows Google’s recent decision to start allowing regulated cryptocurrency exchanges to advertise in the U.S. and Japan.
