bigmarh 1766000250 What stops a rogue extension from calling navigator.storage.getDirectory() directly from the page by injecting a script?
