Short Answer: On a personal computer running standard Chrome, Brave, or Edge, Canvas cannot list or scan installed Chrome extensions because Chromium's security sandbox isolates extension processes from web page JavaScript. Canvas only flags students through three indirect vectors: (1) window.blur / visibilitychange tab-switching events, (2) unguarded chrome-extension:// web-accessible resources, and (3) main-world DOM mutations from visible sidebars. Test how ExamGhost avoids all three in the live simulator below.
Double-clicking Question 1 on Canvas MV3 Audit triggers an inline solve, selects the verified option, and opens the Right-Side Answer Banner.
Verified against Canvas Classic Quizzes & New Quizzes LTI.
2026 Browser Sandbox Architecture
Standard web pages inside Google Chrome do not have permission to call chrome.management.getAll(). However, poorly engineered homework extensions still leak their presence through three client-side mistakes. Here is the exact engineering breakdown:
Canvas's primary built-in telemetry check is window.onblur and document.onvisibilitychange, which writes “Stopped viewing the Canvas quiz-taking page” in red on the professor's Action Log. Because ExamGhost solves questions on double-click directly inside the quiz tab, browser focus is never lost.
Generic AI sidebar extensions append huge <div id="extension-sidebar"> trees directly into document.body, where any MutationObserver can spot them. ExamGhost executes inside Chromium's ISOLATED world and encapsulates UI inside attachShadow({ mode: 'closed' }).
Even if you never leave the Canvas tab, extensions with a “Solve All” button click 30 radio buttons in 3 seconds—creating an obvious vertical wall of question_answered events in the professor's log. ExamGhost intentionally omits any “Solve All” button so you solve one question at a time at a realistic pace.
2026 Canvas Detection Vector Matrix
| Canvas MV3 Audit Capability / Telemetry Vector | ExamGhost (In-Page AI) | ChatGPT Tab-Switching | Legacy Sidebar Extensions |
|---|---|---|---|
Canvas page_blurred / visibilitychange focus loss check | Undetected (0 Blur Events) | Detected Immediately (Red Log) | Often Triggers on Iframe Click |
Host-page MutationObserver scanning for injected sidebars | Protected (Closed Shadow Root) | N/A (External Tab) | Detected (Open DOM Nodes) |
Probing chrome-extension:// public web_accessible_resources | Protected (Zero Public Leaks) | N/A | Vulnerable to Asset Probing |
Server-side question_answered timestamp pacing analysis | Natural One-by-One Cadence | Long Unfocused Gaps | Flagged by "Solve All" Bursts |
| Invisible Mode (Alt+1) safe from walk-by classroom inspection | Yes (1px Dot Indicator) | No (Full ChatGPT Window) | No (Large Floating Sidebar) |
One extension works across your entire university schedule—switch seamlessly between LMS portals and STEM labs:
See how ExamGhost’s Closed Shadow DOM and dual-model AI routing compare against 50+ legacy quiz extensions:
CANVAS MV3 AUDIT FAQ & TECHNICAL REFERENCE
Fact-checked 2026 engineering answers on Canvas extension detection, proctoring plugins, and Manifest V3 browser sandboxing.
chrome.management to see your installed extensions.page_blurred) and answer timestamps. Honorlock and Proctorio are privileged Chrome extensions that you explicitly install; because they are extensions themselves, they request the management and desktopCapture permissions. ExamGhost is built for standard unproctored browser sessions.copy event..instructure.com LTI iframe that uses the same standard web sandbox as Classic Quizzes. ExamGhost attaches in the isolated world of that frame and leaves zero detectable footprints.window.blur (page_blurred). With ExamGhost, your cursor never leaves the Canvas window.page_blurred at zero.