The Privacy Risks of Browser Extensions: What Developers Should Know