New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 594412 link

Starred by 2 users

Issue metadata

Status: WontFix
Owner:
Closed: Apr 2016
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: All
Pri: 2
Type: Bug



Sign in to add a comment

Extensions from CWS KILL other extensions. They delete JS files and WebSQL DB

Reported by t...@nimbusweb.co, Mar 13 2016

Issue description

UserAgent: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36

Steps to reproduce the problem:
1. Install our extension
2. Install Click&Clean or other cleaning extensions
3. RUN their cleaning feature including http://nimb.ws/5qGj4C

What is the expected behavior?
They will delete JS files and WebSQL DB  of OUR extension and will be BLANK page.

What went wrong?
They will delete JS files and WebSQL DB  of OUR extension

WebStore page: https://chrome.google.com/webstore/detail/speed-dial-fvd-new-tab-pa/llaficoajjainaijghjlofdfmbjpebpa 

Did this work before? N/A 

Chrome version: 48.0.2564.116  Channel: n/a
OS Version: 10.0
Flash Version: Shockwave Flash 21.0 r0

Hello,

We develop FVD Speed Dial   https://chrome.google.com/webstore/detail/speed-dial-fvd-new-tab-pa/llaficoajjainaijghjlofdfmbjpebpa  -  One of the Top extensions of that kind, 700k users.

Several month ago we started to receive emails form our users that instead of our  extension they see just a BLANK page. After doing a research, we found out that users loose JS files and WebSQL of our extension. Also, it happened after users used Ccleaner, Click&Clean, etc. After that we found out that Chrome implemented feature that allows extensions to delete FILES and DBs of different extensions.

To replicate problem is fairly easy. For example:
https://chrome.google.com/webstore/detail/clickclean/ghgabhipcejejjmhhchfonmamedcbeod

It has setting to delete all files and DBs.
Screenshot:  http://nimb.ws/5qGj4C
Most of the users do not understand the RESULTS of such options. Such functions are available in many other extensions.

What other developers shall do in that case? Our extensions get killed by other extensions which provide "Advanced features" to users that do not have enough knowledge using them. How can we protect our files and DBs on user side?

Such functions hit our reputation because users do not know the cause of the issue. We loose users, get negative reviews, and we can't provide quality service.

Please help.

Thanks in advanced!
 

Comment 1 by rob@robwu.nl, Apr 28 2016

Labels: -OS-Windows OS-All
Status: Untriaged (was: Unconfirmed)
It's documented in the browsingData API that it can remove other extensions' data:
https://developer.chrome.com/extensions/browsingData

I just checked Click&Clean and it indeed appears to be removing extension data upon request.

I suggest to use chrome.storage.local if you want to persist data without loosing it to other extensions.

Comment 2 by rob@robwu.nl, Apr 28 2016

Cc: rob@robwu.nl
Owner: mkwst@chromium.org
Status: Assigned (was: Untriaged)
Mike, can you check whether this behavior is sane?

Extensions mindlessly deleting other extensions' data is not that nice.

Comment 3 by mkwst@chromium.org, Apr 29 2016

"Mindlessly", sure. "Mindfully"? Idunno. I think it's reasonable to expose the browsing data remover's functionality, but I can see how it could be unexpected.


Comment 4 by mkwst@chromium.org, Apr 29 2016

Cc: mkwst@chromium.org
Owner: rdevlin....@chromium.org
Deferring to Devlin; I personally think this is probably an argument for better documentation, not for duller tools.

Comment 5 Deleted

Comment 6 by t...@nimbusweb.co, Apr 29 2016

Hi,

Thank you for taking look into this problem. 

I would like to emphasize that most of the Chrome Extension users are not familiar with many developer terms. 

Even if they put a warning that those options may delete other extension's data most of the users will proceed and than will complain on us that we provide bad services and they lost all their data that been collected for month.. 

In my personal opinion such option shouldn't be available at all in Chrome API or for very specific extensions.

<sarcasm>

P.S. Right now for developers like us is a good solution to implement such functionality into our own extensions and start killing all Cleaner extensions first, because otherwise they "kill us"

</sarcasm>

Comment 7 by rob@robwu.nl, Apr 29 2016

Team Nimbus, did you see my suggestion at the end of comment 1? If you use chrome.storage, then other extensions cannot delete it as easily as DOM storage and databases.

See https://developer.chrome.com/extensions/storage

Comment 8 by t...@nimbusweb.co, Apr 29 2016

yes, I will forward to my developers the solution but the problem is that our service is cross-platform and it may be difficult to redo whole thing..


Status: WontFix (was: Assigned)
Having the ability to remove data is a useful tool, and, when used correctly, is a good feature.  As with pretty much any extension API, if an extension chooses to use it poorly, it will have bad results.  And, as Rob has pointed out, there are less fragile ways of storing data.

We also already do call this out pretty explicitly in the documentation:
"Seriously: Be careful with protectedWeb and extension. These are destructive operations that your users will write angry email about if they're not well-informed about what to expect when your extension removes data on their behalf."

I'm going to close this, because it sounds like something where the clean up extension needs to manage user expectations better, not something where we should reduce the capabilities of the API.

Comment 10 by t...@nimbusweb.co, May 2 2016

chrome.storage.local - will not work because it doesn't have search and sorting like in websql

I agree that it is a good feature if you know hot to use it right. That's definitely for advanced users.

"format c:\"  - may be also good command, but do you think it good to provide such option to users who doesn't know what it does?

Here is another example:
Chrome has API to disable other extensions. Will it be fair if we put button "Fix the problem" and disable Click&Clean and same others? Because they do not warn users that FVD Speed Dial database will be erased.

The issue here is that some extensions provide this functionality to users who have no clue what will happen next. Our product gets broken and they don't know why it happens again and again. Click&Clean  - is not only one extension which does it. We are not only one company who encountered such problem.

>>We also already do call this out pretty explicitly in the documentation:
"Seriously: Be careful with protectedWeb and extension. These are destructive operations that your users will write angry email about if they're not well-informed about what to expect when your extension removes data on their behalf."

As I said, Click&Clean and others don't warn that other extensions will be broken. Even though when it happens user have no clue that Click&Clean did that. 





Comment 11 by t...@nimbusweb.co, May 2 2016

They complain on us, that we provide poor quality service and write all negative feedback because our extension was broken and all data was lost.

People collect their bookmarks for month, can you image how do they react when the lose it?

Sign in to add a comment