The browser extension API setUninstallURL violates user privacy · HackerTrans