Comment by shridharxp

Injecting JS into the page or controlling it using extension APIs is not a secure way to control the browser.