- cookies: needed to identify to which container request belongs
- webRequest and webRequestBlocking: to supply credentials for proxy authorization (but not for normal web authorization)
There is a known issue with DNS leak happening in non-default containers when uBlock is installed. The issue is not resolvable by this extension, but can be resolved adjusting in uBlock settings. See comment