| OLD | NEW |
| 1 <h1>Formats: Manifest Files</h1> | 1 <h1>Formats: Manifest Files</h1> |
| 2 | 2 |
| 3 | 3 |
| 4 <p> | 4 <p> |
| 5 Every extension, installable web app, and theme has a | 5 Every extension, installable web app, and theme has a |
| 6 <a href="http://www.json.org">JSON</a>-formatted manifest file, | 6 <a href="http://www.json.org">JSON</a>-formatted manifest file, |
| 7 named <code>manifest.json</code>, | 7 named <code>manifest.json</code>, |
| 8 that provides important information. | 8 that provides important information. |
| 9 </p> | 9 </p> |
| 10 | 10 |
| (...skipping 44 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 55 "<a href="#permissions">permissions</a>": [...], | 55 "<a href="#permissions">permissions</a>": [...], |
| 56 "<a href="npapi.html">plugins</a>": [...], | 56 "<a href="npapi.html">plugins</a>": [...], |
| 57 "<a href="#requirements">requirements</a>": {...}, | 57 "<a href="#requirements">requirements</a>": {...}, |
| 58 "<a href="autoupdate.html">update_url</a>": "http://<em>path/to/updateInfo</em
>.xml", | 58 "<a href="autoupdate.html">update_url</a>": "http://<em>path/to/updateInfo</em
>.xml", |
| 59 "<a href="#web_accessible_resources">web_accessible_resources</a>": [...], | 59 "<a href="#web_accessible_resources">web_accessible_resources</a>": [...], |
| 60 "<a href="#sandbox">sandbox</a>": [...] | 60 "<a href="#sandbox">sandbox</a>": [...] |
| 61 } | 61 } |
| 62 </pre> | 62 </pre> |
| 63 | 63 |
| 64 | 64 |
| 65 <h2>Field details</h2> | 65 <h2 id="field_details">Field details</h2> |
| 66 | 66 |
| 67 <p> | 67 <p> |
| 68 This section covers fields that aren't described in another page. | 68 This section covers fields that aren't described in another page. |
| 69 For a complete list of fields, | 69 For a complete list of fields, |
| 70 with links to where they're described in detail, | 70 with links to where they're described in detail, |
| 71 see the <a href="#overview">Field summary</a>. | 71 see the <a href="#overview">Field summary</a>. |
| 72 </p> | 72 </p> |
| 73 | 73 |
| 74 | 74 |
| 75 <h3 id="app">app</h3> | 75 <h3 id="app">app</h3> |
| (...skipping 168 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 244 </p> | 244 </p> |
| 245 | 245 |
| 246 <p> | 246 <p> |
| 247 The "disposition" is either "inline" or "window". Intents with "window" disposit
ion will open a new tab when invoked. Intents with "inline" disposition will be
displayed inside the intent picker when invoked. | 247 The "disposition" is either "inline" or "window". Intents with "window" disposit
ion will open a new tab when invoked. Intents with "inline" disposition will be
displayed inside the intent picker when invoked. |
| 248 </p> | 248 </p> |
| 249 | 249 |
| 250 <p> | 250 <p> |
| 251 For more information on intents, refer to the <a href="http://dvcs.w3.org/hg/web
-intents/raw-file/tip/spec/Overview.html">Web Intents specification</a> and <a h
ref="http://www.webintents.org">webintents.org</a>. | 251 For more information on intents, refer to the <a href="http://dvcs.w3.org/hg/web
-intents/raw-file/tip/spec/Overview.html">Web Intents specification</a> and <a h
ref="http://www.webintents.org">webintents.org</a>. |
| 252 </p> | 252 </p> |
| 253 | 253 |
| 254 <h4>Handling content types via intents</h4> | 254 <h4 id="content_types">Handling content types via intents</h4> |
| 255 | 255 |
| 256 <p> | 256 <p> |
| 257 Web Intents can be registered as content type viewers. To do that, the action ve
rb must be <a href="http://webintents.org/view">"http://webintents.org/view"</a>
, and the content type must be a white-listed MIME type. | 257 Web Intents can be registered as content type viewers. To do that, the action ve
rb must be <a href="http://webintents.org/view">"http://webintents.org/view"</a>
, and the content type must be a white-listed MIME type. |
| 258 </p> | 258 </p> |
| 259 | 259 |
| 260 <table> | 260 <table> |
| 261 <tr> | 261 <tr> |
| 262 <th>Whitelisted MIME types</th> | 262 <th>Whitelisted MIME types</th> |
| 263 </tr> | 263 </tr> |
| 264 <tr><td>application/rss+xml</td></tr> | 264 <tr><td>application/rss+xml</td></tr> |
| (...skipping 558 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 823 Prior to manifest version 2 all resources within an extension could be accessed | 823 Prior to manifest version 2 all resources within an extension could be accessed |
| 824 from any page on the web. This allowed a malicious website to | 824 from any page on the web. This allowed a malicious website to |
| 825 <a href="http://en.wikipedia.org/wiki/Device_fingerprint">fingerprint</a> the | 825 <a href="http://en.wikipedia.org/wiki/Device_fingerprint">fingerprint</a> the |
| 826 extensions that a user has installed or exploit vulnerabilities (for example | 826 extensions that a user has installed or exploit vulnerabilities (for example |
| 827 <a href="http://en.wikipedia.org/wiki/Cross-site_scripting">XSS bugs</a>)within | 827 <a href="http://en.wikipedia.org/wiki/Cross-site_scripting">XSS bugs</a>)within |
| 828 installed extensions. Limiting availability to only resources which are | 828 installed extensions. Limiting availability to only resources which are |
| 829 explicitly intended to be web accessible serves to both minimize the available | 829 explicitly intended to be web accessible serves to both minimize the available |
| 830 attack surface and protect the privacy of users. | 830 attack surface and protect the privacy of users. |
| 831 </p> | 831 </p> |
| 832 | 832 |
| 833 <h4>Default Availability</h4> | 833 <h4 id="availability">Default Availability</h4> |
| 834 | 834 |
| 835 <p> | 835 <p> |
| 836 Resources inside of packages using <a href="#manifest_version"><code>manifest_ve
rsion</code></a> | 836 Resources inside of packages using <a href="#manifest_version"><code>manifest_ve
rsion</code></a> |
| 837 2 or above are <strong>blocked by default</strong>, and must be whitelisted | 837 2 or above are <strong>blocked by default</strong>, and must be whitelisted |
| 838 for use via this property. | 838 for use via this property. |
| 839 </p> | 839 </p> |
| 840 | 840 |
| 841 <p> | 841 <p> |
| 842 Resources inside of packages using <code>manifest_version</code> 1 are available | 842 Resources inside of packages using <code>manifest_version</code> 1 are available |
| 843 by default, but <em>if</em> you do set this property, then it will be treated as | 843 by default, but <em>if</em> you do set this property, then it will be treated as |
| (...skipping 61 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 905 goes into more detail about implementing a sandboxing workflow that enables use | 905 goes into more detail about implementing a sandboxing workflow that enables use |
| 906 of libraries that would otherwise have issues executing under extension's | 906 of libraries that would otherwise have issues executing under extension's |
| 907 <a href="../extensions/contentSecurityPolicy.html">default Content Security | 907 <a href="../extensions/contentSecurityPolicy.html">default Content Security |
| 908 Policy</a>. | 908 Policy</a>. |
| 909 </p> | 909 </p> |
| 910 | 910 |
| 911 <p> | 911 <p> |
| 912 Sandboxed page may only be specified when using | 912 Sandboxed page may only be specified when using |
| 913 <a href="#manifest_version"><code>manifest_version</code></a> 2 or above. | 913 <a href="#manifest_version"><code>manifest_version</code></a> 2 or above. |
| 914 </p> | 914 </p> |
| OLD | NEW |