OLD | NEW |
1 <h1>Formats: Manifest Files</h1> | 1 <h1>Formats: Manifest Files</h1> |
2 | 2 |
3 | 3 |
4 <p> | 4 <p> |
5 Every extension, installable web app, and theme has a | 5 Every extension, installable web app, and theme has a |
6 <a href="http://www.json.org">JSON</a>-formatted manifest file, | 6 <a href="http://www.json.org">JSON</a>-formatted manifest file, |
7 named <code>manifest.json</code>, | 7 named <code>manifest.json</code>, |
8 that provides important information. | 8 that provides important information. |
9 </p> | 9 </p> |
10 | 10 |
(...skipping 44 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
55 "<a href="#permissions">permissions</a>": [...], | 55 "<a href="#permissions">permissions</a>": [...], |
56 "<a href="npapi.html">plugins</a>": [...], | 56 "<a href="npapi.html">plugins</a>": [...], |
57 "<a href="#requirements">requirements</a>": {...}, | 57 "<a href="#requirements">requirements</a>": {...}, |
58 "<a href="autoupdate.html">update_url</a>": "http://<em>path/to/updateInfo</em
>.xml", | 58 "<a href="autoupdate.html">update_url</a>": "http://<em>path/to/updateInfo</em
>.xml", |
59 "<a href="#web_accessible_resources">web_accessible_resources</a>": [...], | 59 "<a href="#web_accessible_resources">web_accessible_resources</a>": [...], |
60 "<a href="#sandbox">sandbox</a>": [...] | 60 "<a href="#sandbox">sandbox</a>": [...] |
61 } | 61 } |
62 </pre> | 62 </pre> |
63 | 63 |
64 | 64 |
65 <h2>Field details</h2> | 65 <h2 id="field_details">Field details</h2> |
66 | 66 |
67 <p> | 67 <p> |
68 This section covers fields that aren't described in another page. | 68 This section covers fields that aren't described in another page. |
69 For a complete list of fields, | 69 For a complete list of fields, |
70 with links to where they're described in detail, | 70 with links to where they're described in detail, |
71 see the <a href="#overview">Field summary</a>. | 71 see the <a href="#overview">Field summary</a>. |
72 </p> | 72 </p> |
73 | 73 |
74 | 74 |
75 <h3 id="app">app</h3> | 75 <h3 id="app">app</h3> |
(...skipping 168 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
244 </p> | 244 </p> |
245 | 245 |
246 <p> | 246 <p> |
247 The "disposition" is either "inline" or "window". Intents with "window" disposit
ion will open a new tab when invoked. Intents with "inline" disposition will be
displayed inside the intent picker when invoked. | 247 The "disposition" is either "inline" or "window". Intents with "window" disposit
ion will open a new tab when invoked. Intents with "inline" disposition will be
displayed inside the intent picker when invoked. |
248 </p> | 248 </p> |
249 | 249 |
250 <p> | 250 <p> |
251 For more information on intents, refer to the <a href="http://dvcs.w3.org/hg/web
-intents/raw-file/tip/spec/Overview.html">Web Intents specification</a> and <a h
ref="http://www.webintents.org">webintents.org</a>. | 251 For more information on intents, refer to the <a href="http://dvcs.w3.org/hg/web
-intents/raw-file/tip/spec/Overview.html">Web Intents specification</a> and <a h
ref="http://www.webintents.org">webintents.org</a>. |
252 </p> | 252 </p> |
253 | 253 |
254 <h4>Handling content types via intents</h4> | 254 <h4 id="content_types">Handling content types via intents</h4> |
255 | 255 |
256 <p> | 256 <p> |
257 Web Intents can be registered as content type viewers. To do that, the action ve
rb must be <a href="http://webintents.org/view">"http://webintents.org/view"</a>
, and the content type must be a white-listed MIME type. | 257 Web Intents can be registered as content type viewers. To do that, the action ve
rb must be <a href="http://webintents.org/view">"http://webintents.org/view"</a>
, and the content type must be a white-listed MIME type. |
258 </p> | 258 </p> |
259 | 259 |
260 <table> | 260 <table> |
261 <tr> | 261 <tr> |
262 <th>Whitelisted MIME types</th> | 262 <th>Whitelisted MIME types</th> |
263 </tr> | 263 </tr> |
264 <tr><td>application/rss+xml</td></tr> | 264 <tr><td>application/rss+xml</td></tr> |
(...skipping 564 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
829 Prior to manifest version 2 all resources within an extension could be accessed | 829 Prior to manifest version 2 all resources within an extension could be accessed |
830 from any page on the web. This allowed a malicious website to | 830 from any page on the web. This allowed a malicious website to |
831 <a href="http://en.wikipedia.org/wiki/Device_fingerprint">fingerprint</a> the | 831 <a href="http://en.wikipedia.org/wiki/Device_fingerprint">fingerprint</a> the |
832 extensions that a user has installed or exploit vulnerabilities (for example | 832 extensions that a user has installed or exploit vulnerabilities (for example |
833 <a href="http://en.wikipedia.org/wiki/Cross-site_scripting">XSS bugs</a>)within | 833 <a href="http://en.wikipedia.org/wiki/Cross-site_scripting">XSS bugs</a>)within |
834 installed extensions. Limiting availability to only resources which are | 834 installed extensions. Limiting availability to only resources which are |
835 explicitly intended to be web accessible serves to both minimize the available | 835 explicitly intended to be web accessible serves to both minimize the available |
836 attack surface and protect the privacy of users. | 836 attack surface and protect the privacy of users. |
837 </p> | 837 </p> |
838 | 838 |
839 <h4>Default Availability</h4> | 839 <h4 id="availability">Default Availability</h4> |
840 | 840 |
841 <p> | 841 <p> |
842 Resources inside of packages using <a href="#manifest_version"><code>manifest_ve
rsion</code></a> | 842 Resources inside of packages using <a href="#manifest_version"><code>manifest_ve
rsion</code></a> |
843 2 or above are <strong>blocked by default</strong>, and must be whitelisted | 843 2 or above are <strong>blocked by default</strong>, and must be whitelisted |
844 for use via this property. | 844 for use via this property. |
845 </p> | 845 </p> |
846 | 846 |
847 <p> | 847 <p> |
848 Resources inside of packages using <code>manifest_version</code> 1 are available | 848 Resources inside of packages using <code>manifest_version</code> 1 are available |
849 by default, but <em>if</em> you do set this property, then it will be treated as | 849 by default, but <em>if</em> you do set this property, then it will be treated as |
(...skipping 61 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
911 goes into more detail about implementing a sandboxing workflow that enables use | 911 goes into more detail about implementing a sandboxing workflow that enables use |
912 of libraries that would otherwise have issues executing under extension's | 912 of libraries that would otherwise have issues executing under extension's |
913 <a href="../extensions/contentSecurityPolicy.html">default Content Security | 913 <a href="../extensions/contentSecurityPolicy.html">default Content Security |
914 Policy</a>. | 914 Policy</a>. |
915 </p> | 915 </p> |
916 | 916 |
917 <p> | 917 <p> |
918 Sandboxed page may only be specified when using | 918 Sandboxed page may only be specified when using |
919 <a href="#manifest_version"><code>manifest_version</code></a> 2 or above. | 919 <a href="#manifest_version"><code>manifest_version</code></a> 2 or above. |
920 </p> | 920 </p> |
OLD | NEW |