Securing your extensions against compromised renderer processes
groups.google.com