bookmarks

Use this permission if your extension's core functionality involves managing or interacting with bookmarks.

Examples:

• A "bookmark manager" that provides an alternative UI for organizing bookmarks.
• An extension that automatically creates bookmarks for specific pages.
• A "dead link checker" that scans a user's bookmarks for broken URLs.
• An extension that exports or imports bookmarks in a custom format.

This permission triggers a warning during installation.

{
  "name": "My Bookmarks Extension",
  "version": "1.0",
  "manifest_version": 3,
  "permissions": [
    "bookmarks"
  ],
  "action": {}
}

Why is it risky?

Your bookmarks can reveal a lot about your interests, work, and personal life. This permission gives an extension full control to:

• Read all your bookmarks and folders.
• Add new bookmarks (e.g., spam or advertising links).
• Delete or change your existing bookmarks.

While many legitimate extensions use this to help you manage your bookmarks, a malicious one could spy on your saved sites or edit your bookmarks to point to malicious sites. You should only grant this to extensions from developers you trust.

This example finds and logs all bookmarks for "google.com" when the user clicks the extension icon.

// background.js

chrome.action.onClicked.addListener(() => {
  searchGoogleBookmarks();
});

function searchGoogleBookmarks() {
  chrome.bookmarks.search('google.com', (results) => {
    if (chrome.runtime.lastError) {
      console.error(chrome.runtime.lastError.message);
      return;
    }

    if (results.length > 0) {
      console.log(`Found ${results.length} bookmark(s) for 'google.com':`);
      results.forEach((bookmark) => {
        console.log(`  - Title: ${bookmark.title}`);
        console.log(`    URL: ${bookmark.url}`);
        console.log(`    ID: ${bookmark.id}`);
      });
    } else {
      console.log("No bookmarks found for 'google.com'.");
    }
  });
}