extensions/common/api/_behavior_features.json - Issue 2159103006: Add policy provider that would filter extensions/apps allowed on the

Side by Side Diff: extensions/common/api/_behavior_features.json

Issue 2159103006: Add policy provider that would filter extensions/apps allowed on the (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@master

Patch Set: Added tests Created 4 years, 1 month ago

Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.

Jump to:

View unified diff | Download patch

« chrome/browser/chromeos/extensions/signin_screen_policy_provider.cc ('K') | « chrome/browser/extensions/extension_system_impl.cc ('k') | extensions/common/features/behavior_feature.h » ('j') | no next file with comments »
Toggle Intra-line Diffs ('i') | Expand Comments ('e') | Collapse Comments ('c') | Hide Comments ('s')

OLD	NEW
1 // Copyright 2014 The Chromium Authors. All rights reserved.	1 // Copyright 2014 The Chromium Authors. All rights reserved.

2 // Use of this source code is governed by a BSD-style license that can be	2 // Use of this source code is governed by a BSD-style license that can be

3 // found in the LICENSE file.	3 // found in the LICENSE file.

4	4

5 // This features file defines switches used to control Extension behaviour,	5 // This features file defines switches used to control Extension behaviour,

6 // typically whitelist configuration.	6 // typically whitelist configuration.

7 // See chrome/common/extensions/api/_features.md to understand this file, as	7 // See chrome/common/extensions/api/_features.md to understand this file, as

8 // well as feature.h, simple_feature.h, and base_feature_provider.h.	8 // well as feature.h, simple_feature.h, and base_feature_provider.h.

9	9

10 {	10 {

(...skipping 28 matching lines...) Expand all Loading...
39 "channel": "stable",	39 "channel": "stable",

40 "extension_types": "all",	40 "extension_types": "all",

41 "whitelist": [	41 "whitelist": [

42 "CBCC42ABED43A4B58FE3810E62AFFA010EB0349F" // https://crbug.com/538252	42 "CBCC42ABED43A4B58FE3810E62AFFA010EB0349F" // https://crbug.com/538252

43 ]	43 ]

44 },	44 },

45 "allow_usb_devices_permission_interface_class": {	45 "allow_usb_devices_permission_interface_class": {

46 "channel": "dev",	46 "channel": "dev",

47 "extension_types": ["platform_app"],	47 "extension_types": ["platform_app"],

48 "session_types": ["kiosk"]	48 "session_types": ["kiosk"]

	49 },

	50 "signin_screen": [ {
	Devlin 2016/11/09 22:07:43 How do we anticipate using this? Will it eventual How do we anticipate using this? Will it eventually be open to arbitrary apps/extensions, or will this always be whitelist only? Denis Kuznetsov (DE-MUC) 2016/11/10 14:12:11 It will be open to all extensions installed via po Show quoted text On 2016/11/09 22:07:43, Devlin (slow) wrote: > How do we anticipate using this? Will it eventually be open to arbitrary > apps/extensions, or will this always be whitelist only? It will be open to all extensions installed via policy that match some extra criteria (e.g. requested permissions) once we implement more in-depth defense mechanisms.
	51 "blacklist": [

	52 "9E527CDA9D7C50844E8A5DB964A54A640AE48F98" // Chrome remote desktop

	53 ],

	54 // Allow developers to test new feature.
	asargent_no_longer_on_chrome 2016/11/09 21:59:48 grammar nit: "feature" -> "features" grammar nit: "feature" -> "features" Denis Kuznetsov (DE-MUC) 2016/11/10 14:12:12 Done. Show quoted text On 2016/11/09 21:59:48, Antony Sargent wrote: > grammar nit: "feature" -> "features" Done.
	55 "channel": "dev",

	56 "component_extensions_auto_granted": false,

	57 "extension_types": ["platform_app"],

	58 "location": "policy",

	59 "min_manifest_version": 2,
	asargent_no_longer_on_chrome 2016/11/09 21:59:49 FYI, I don't think we really support installing ex FYI, I don't think we really support installing extensions/apps/themes with manifest version 1 anymore, so you don't need to bother including this min_manifest_version key/val. Denis Kuznetsov (DE-MUC) 2016/11/10 14:12:11 Done. Show quoted text On 2016/11/09 21:59:49, Antony Sargent wrote: > FYI, I don't think we really support installing extensions/apps/themes with > manifest version 1 anymore, so you don't need to bother including this > min_manifest_version key/val. Done.
	60 "platforms": ["chromeos"]

	61 }, {

	62 // Strict restrictions for stable channel.

	63 // For now only whitelisted apps.

	64 "channel": "stable",

	65 "component_extensions_auto_granted": false,

	66 "extension_types": ["platform_app"],

	67 "location": "policy",

	68 "min_manifest_version": 2,

	69 "platforms": ["chromeos"],

	70 "whitelist": [

	71 "EC3DE21E048B67319893889529354DFBFA96FD23" // Smart Card Connector

	72 ]

	73 }, {

	74 // Explicitly whitelist extensions that should always be available on a sing in screen.
	asargent_no_longer_on_chrome 2016/11/09 21:59:49 typo: "sing" -> "sign" typo: "sing" -> "sign" Denis Kuznetsov (DE-MUC) 2016/11/10 14:12:11 Done. Show quoted text On 2016/11/09 21:59:49, Antony Sargent wrote: > typo: "sing" -> "sign" Done.
	75 "channel": "stable",

	76 "platforms": ["chromeos"],

	77 "whitelist": [
	asargent_no_longer_on_chrome 2016/11/09 21:59:49 Did you intend for component_extensions_auto_grant Did you intend for component_extensions_auto_granted to be true in this block? (that's the default if not specified, I believe). Denis Kuznetsov (DE-MUC) 2016/11/10 14:12:11 Good catch, thanks. Show quoted text On 2016/11/09 21:59:49, Antony Sargent wrote: > Did you intend for component_extensions_auto_granted to be true in this block? > (that's the default if not specified, I believe). Good catch, thanks.
	78 "E24F1786D842E91E74C27929B0B3715A4689A473", // Gnubby component extension

	79 "6F9E349A0561C78A0D3F41496FE521C5151C7F71", // Gnubby app

	80 "8EBDF73405D0B84CEABB8C7513C9B9FA9F1DC2CE", // Genius app (help)

	81 "3F50C3A83839D9C76334BCE81CDEC06174F266AF" // Virtual Keyboard

	82 ]

49 }	83 }

	84 ]

50 }	85 }

OLD	NEW