ReADQuest: enforce bug-bounty scope in the browser
A Manifest V3 Chrome extension that enforces bug-bounty scope with declarativeNetRequest — so out-of-scope hosts never even receive a request.
scope-sentinel answers “is this in scope?” at the command line. ReADQuest answers it in the browser, at the network layer, so an out-of-scope host never receives a single request from you.
It uses Chrome's Manifest V3 declarativeNetRequest API, which means the blocking happens inside the browser engine rather than in slow, bypassable JavaScript. You load your program's scope and the extension quietly stops anything outside it.
Why it matters
- Blocking happens at the network layer, before a request ever leaves your machine.
- declarativeNetRequest is enforced by the browser, not by a content script you can accidentally disable.
- It is a guardrail for long recon sessions, where tabs and redirects tend to wander off-scope.
It is the belt-and-braces companion to a scope checklist: even if you misclick, the request does not go out.