browser extension vulnerabilities