Description of the issue:
Extensions seem to be autoupdating, which would allow a compromised extension to issue a malicious update that would be automatically downloaded, potentially violating privacy/security.
Steps to Reproduce (add as many as necessary):
- Install any extension;
- Do nothing;
- Wait for extension to autoupdate.
Actual Result (gifs and screenshots are welcome!):
Extension is kept up to date without user intervention/consent.
Expected result:
Doing nothing should not result in extension being automatically updated. Or at least there should be a way to disable that and a button for manually updating extensions when updates are available.
Reproduces how often:
As frequently as extensions get new versions.
Brave Version(about:brave):
Version 0.57.6 Chromium: 71.0.3578.31 (Official Build) beta (64-bit)
Reproducible on current live release (yes/no):
yes