Permission Creep in the Toolbar: A Control Model for Browser Extensions
Browser extensions are installed per user profile, updated silently and rarely appear in software asset registers, yet they can read page content and act inside authenticated sessions. This article sets out a proportionate control model for UK organisations: discover extensions across managed and unmanaged browsers, assess permission scope, enforce an allowlist and manage exceptions without treating every toolbar utility as a procurement event.