| OLD | NEW |
| 1 <h1>Formats: Manifest Files</h1> | 1 <h1>Formats: Manifest Files</h1> |
| 2 | 2 |
| 3 | 3 |
| 4 <p> | 4 <p> |
| 5 Every extension, installable web app, and theme has a | 5 Every extension, installable web app, and theme has a |
| 6 <a href="http://www.json.org">JSON</a>-formatted manifest file, | 6 <a href="http://www.json.org">JSON</a>-formatted manifest file, |
| 7 named <code>manifest.json</code>, | 7 named <code>manifest.json</code>, |
| 8 that provides important information. | 8 that provides important information. |
| 9 </p> | 9 </p> |
| 10 | 10 |
| (...skipping 44 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 55 "<a href="#permissions">permissions</a>": [...], | 55 "<a href="#permissions">permissions</a>": [...], |
| 56 "<a href="npapi.html">plugins</a>": [...], | 56 "<a href="npapi.html">plugins</a>": [...], |
| 57 "<a href="#requirements">requirements</a>": {...}, | 57 "<a href="#requirements">requirements</a>": {...}, |
| 58 "<a href="autoupdate.html">update_url</a>": "http://<em>path/to/updateInfo</em
>.xml", | 58 "<a href="autoupdate.html">update_url</a>": "http://<em>path/to/updateInfo</em
>.xml", |
| 59 "<a href="#web_accessible_resources">web_accessible_resources</a>": [...], | 59 "<a href="#web_accessible_resources">web_accessible_resources</a>": [...], |
| 60 "<a href="#sandbox">sandbox</a>": [...] | 60 "<a href="#sandbox">sandbox</a>": [...] |
| 61 } | 61 } |
| 62 </pre> | 62 </pre> |
| 63 | 63 |
| 64 | 64 |
| 65 <h2>Field details</h2> | 65 <h2 id="field_details">Field details</h2> |
| 66 | 66 |
| 67 <p> | 67 <p> |
| 68 This section covers fields that aren't described in another page. | 68 This section covers fields that aren't described in another page. |
| 69 For a complete list of fields, | 69 For a complete list of fields, |
| 70 with links to where they're described in detail, | 70 with links to where they're described in detail, |
| 71 see the <a href="#overview">Field summary</a>. | 71 see the <a href="#overview">Field summary</a>. |
| 72 </p> | 72 </p> |
| 73 | 73 |
| 74 | 74 |
| 75 <h3 id="app">app</h3> | 75 <h3 id="app">app</h3> |
| (...skipping 168 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 244 </p> | 244 </p> |
| 245 | 245 |
| 246 <p> | 246 <p> |
| 247 The "disposition" is either "inline" or "window". Intents with "window" disposit
ion will open a new tab when invoked. Intents with "inline" disposition will be
displayed inside the intent picker when invoked. | 247 The "disposition" is either "inline" or "window". Intents with "window" disposit
ion will open a new tab when invoked. Intents with "inline" disposition will be
displayed inside the intent picker when invoked. |
| 248 </p> | 248 </p> |
| 249 | 249 |
| 250 <p> | 250 <p> |
| 251 For more information on intents, refer to the <a href="http://dvcs.w3.org/hg/web
-intents/raw-file/tip/spec/Overview.html">Web Intents specification</a> and <a h
ref="http://www.webintents.org">webintents.org</a>. | 251 For more information on intents, refer to the <a href="http://dvcs.w3.org/hg/web
-intents/raw-file/tip/spec/Overview.html">Web Intents specification</a> and <a h
ref="http://www.webintents.org">webintents.org</a>. |
| 252 </p> | 252 </p> |
| 253 | 253 |
| 254 <h4>Handling content types via intents</h4> | 254 <h4 id="content_types">Handling content types via intents</h4> |
| 255 | 255 |
| 256 <p> | 256 <p> |
| 257 Web Intents can be registered as content type viewers. To do that, the action ve
rb must be <a href="http://webintents.org/view">"http://webintents.org/view"</a>
, and the content type must be a white-listed MIME type. | 257 Web Intents can be registered as content type viewers. To do that, the action ve
rb must be <a href="http://webintents.org/view">"http://webintents.org/view"</a>
, and the content type must be a white-listed MIME type. |
| 258 </p> | 258 </p> |
| 259 | 259 |
| 260 <table> | 260 <table> |
| 261 <tr> | 261 <tr> |
| 262 <th>Whitelisted MIME types</th> | 262 <th>Whitelisted MIME types</th> |
| 263 </tr> | 263 </tr> |
| 264 <tr><td>application/rss+xml</td></tr> | 264 <tr><td>application/rss+xml</td></tr> |
| (...skipping 564 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 829 Prior to manifest version 2 all resources within an extension could be accessed | 829 Prior to manifest version 2 all resources within an extension could be accessed |
| 830 from any page on the web. This allowed a malicious website to | 830 from any page on the web. This allowed a malicious website to |
| 831 <a href="http://en.wikipedia.org/wiki/Device_fingerprint">fingerprint</a> the | 831 <a href="http://en.wikipedia.org/wiki/Device_fingerprint">fingerprint</a> the |
| 832 extensions that a user has installed or exploit vulnerabilities (for example | 832 extensions that a user has installed or exploit vulnerabilities (for example |
| 833 <a href="http://en.wikipedia.org/wiki/Cross-site_scripting">XSS bugs</a>)within | 833 <a href="http://en.wikipedia.org/wiki/Cross-site_scripting">XSS bugs</a>)within |
| 834 installed extensions. Limiting availability to only resources which are | 834 installed extensions. Limiting availability to only resources which are |
| 835 explicitly intended to be web accessible serves to both minimize the available | 835 explicitly intended to be web accessible serves to both minimize the available |
| 836 attack surface and protect the privacy of users. | 836 attack surface and protect the privacy of users. |
| 837 </p> | 837 </p> |
| 838 | 838 |
| 839 <h4>Default Availability</h4> | 839 <h4 id="availability">Default Availability</h4> |
| 840 | 840 |
| 841 <p> | 841 <p> |
| 842 Resources inside of packages using <a href="#manifest_version"><code>manifest_ve
rsion</code></a> | 842 Resources inside of packages using <a href="#manifest_version"><code>manifest_ve
rsion</code></a> |
| 843 2 or above are <strong>blocked by default</strong>, and must be whitelisted | 843 2 or above are <strong>blocked by default</strong>, and must be whitelisted |
| 844 for use via this property. | 844 for use via this property. |
| 845 </p> | 845 </p> |
| 846 | 846 |
| 847 <p> | 847 <p> |
| 848 Resources inside of packages using <code>manifest_version</code> 1 are available | 848 Resources inside of packages using <code>manifest_version</code> 1 are available |
| 849 by default, but <em>if</em> you do set this property, then it will be treated as | 849 by default, but <em>if</em> you do set this property, then it will be treated as |
| (...skipping 61 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 911 goes into more detail about implementing a sandboxing workflow that enables use | 911 goes into more detail about implementing a sandboxing workflow that enables use |
| 912 of libraries that would otherwise have issues executing under extension's | 912 of libraries that would otherwise have issues executing under extension's |
| 913 <a href="../extensions/contentSecurityPolicy.html">default Content Security | 913 <a href="../extensions/contentSecurityPolicy.html">default Content Security |
| 914 Policy</a>. | 914 Policy</a>. |
| 915 </p> | 915 </p> |
| 916 | 916 |
| 917 <p> | 917 <p> |
| 918 Sandboxed page may only be specified when using | 918 Sandboxed page may only be specified when using |
| 919 <a href="#manifest_version"><code>manifest_version</code></a> 2 or above. | 919 <a href="#manifest_version"><code>manifest_version</code></a> 2 or above. |
| 920 </p> | 920 </p> |
| OLD | NEW |