1Password Dependency Breaks Syntax Highlighting
17 hours ago
- The author noticed syntax highlighting was broken in Firefox due to the 1Password browser extension.
- The issue was caused by 1Password's use of Prism.js, a JavaScript syntax highlighter.
- The author questions why a password manager needs a syntax highlighter, speculating it is for SSH key configuration.
- The author expresses security concerns about 1Password including dependencies that run in tab context, posing a supply-chain attack risk.
- The author concludes that this indicates poor security practices from a security-critical product.