NPAPI is a really big hammer that should only be used when no other approach will work. Code running in an NPAPI plugin has the full permissions of the current user and is not sandboxed or shielded from malicious input by Google Chrome in any way. You ...