Skip to content


"Exposing chrome JS objects to content without __exposedProps__ is insecure and deprecated" warning #1637

bananastalktome opened this Issue · 1 comment

2 participants


(New issue created from comment in #1595 as requested by arantius)

I am getting the same __exposedProps__ error when attempting to iterate over the array returned by GM_listValues().

The following simple script shows the issue:

// ==UserScript==
// @name        Demonstrate __exposedProps__ warning
// @namespace   personal
// @include     SITE_URL
// @require
// @require
// @grant        GM_listValues
// @version     1
// ==/UserScript==

var gmValues = GM_listValues();

gmValues.forEach(function(val, index){

The console shows:

Exposing chrome JS objects to content without __exposedProps__ is insecure and deprecated. See for more information.

draftKeys.forEach(function(val, index){

Additional Details: OSX 10.8.1, Firefox 15.0.1, GreaseMonkey 1.1



Confirmed. Accessing the length property works without logging this, but setting it exposed makes forEach stop logging.

@arantius arantius closed this in b03ac3b
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Something went wrong with that request. Please try again.