XSSassin

[ INSTALL · CHROME WEB STORE ]

Add XSSassin in one click.

Preferred path is the Chrome Web Store. Contributors can still load an unpacked build from the GitHub repository.

Add to Chrome

[ STORE · RECOMMENDED ]

Chrome Web Store

  1. 01

    Open the listing

    Visit the XSSassin Chrome Web Store page.

  2. 02

    Add to Chrome

    Confirm the extension install when Chrome prompts you.

  3. 03

    Enable per origin

    Open the popup on a tab you are authorized to test and turn XSSassin on for that origin only.

CONTRIBUTORS · LOAD UNPACKED

DEV

From GitHub

For development: enable Developer mode on chrome://extensions/, choose Load unpacked, and select the repository folder.

Open GitHub

[ PERMISSIONS · WHY THEY EXIST ]

Permissions overview

High-level purpose only. Content scripts run on an origin after you enable it in the allowlist.

Permission Purpose
storage Enabled origins, custom payloads, defaults, Smart-Injection toggle.
activeTab / tabs Resolve the current tab for the popup and messaging.
scripting Inject content scripts when a tab has not yet loaded them (for example Auto fill).
<all_urls> May run on any origin only after you enable that origin in storage.