New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 597132 link

Starred by 3 users

Issue metadata

Status: WontFix
Owner: ----
Closed: Sep 28
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: All
Pri: 3
Type: Bug



Sign in to add a comment

Inline installs should be disabled in incognito

Project Member Reported by mea...@chromium.org, Mar 23 2016

Issue description

Clicking "view details" on the inline install dialog takes the user to the Webstore which says that they can't install extensions in incognito. This makes it sound like inline install should be disabled in incognito in the first place, mainly for consistency.
 
Cc: ackermanb@google.com rdevlin....@chromium.org asargent@chromium.org
Interesting thought.  Presumably installing the extension through the inline installation installs it to the underlying profile, which is also a little weird.  Antony, Ben, any opinions here?
For consistency sake, I think it makes sense. Its a little weird that currently it's possible to inline install in incognito mode and attach it to your profile.
There's also a few other concerns here.  For instance, we shouldn't just silently fail - we should let the user know somehow that the extension wants to be installed.  Perhaps just redirect automatically to the webstore?  We also need to figure out the response to the API call.  In theory, we don't want incognito to be easily identified by websites (I know there are already ways, but we don't want to add more), so we can't return an error saying "Sorry, the user is in incognito mode".

Comment 4 by mea...@chromium.org, May 10 2016

Components: Privacy
> Perhaps just redirect automatically to the webstore?

That sounds like the least disruptive and most logical solution :)

> In theory, we don't want incognito to be easily identified by websites

Huh, great point, not sure what to do about that. Adding Privacy label just in case.
Yeah, since we don't allow install from the regular webstore in incognito, I agree that we shouldn't allow inline install. I agree that opening up a non-incognito tab to the webstore entry is probably the right solution. As for the response to the API call initiating the install, I think it would be reasonable to return the user cancelled string.

Comment 6 by bmil...@expedia.com, Jul 22 2016

The userCanceled enum seems too specific in this scenario.  Would you consider otherError or something similar instead?  I understand the need to keep it ambiguous, but a well thought out message in response to userCanceled could be very different from otherError.  Such as:  
a. userCanceled - a tooltip popup telling the user where to install the extension if they change there mind. 
b. otherError - a "something went wrong" error message that informs the user of potential problems with the installation, such as being in incognito mode or using an old version of chrome (not sure if that's a real scenario).
Some generic error message would be fine, but as Devlin mentioned in (3) we'd probably want to make sure it was an error message that could occur for other reasons so that it wasn't a reliable way to determine if the user was using an incognito window. 

Status: Available (was: Untriaged)
Project Member

Comment 9 by sheriffbot@chromium.org, Sep 25 2017

Labels: Hotlist-Recharge-Cold
Status: Untriaged (was: Available)
This issue has been Available for over a year. If it's no longer important or seems unlikely to be fixed, please consider closing it out. If it is important, please re-triage the issue.

Sorry for the inconvenience if the bug really should have been left as Available. If you change it back, also remove the "Hotlist-Recharge-Cold" label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
Cc: -asargent@chromium.org
Status: Available (was: Untriaged)
Project Member

Comment 11 by sheriffbot@chromium.org, Sep 28

Status: Untriaged (was: Available)
This issue has been Available for over a year. If it's no longer important or seems unlikely to be fixed, please consider closing it out. If it is important, please re-triage the issue.

Sorry for the inconvenience if the bug really should have been left as Available.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
Status: WontFix (was: Untriaged)
Inline install is deprecated.

https://blog.chromium.org/2018/06/improving-extension-transparency-for.html

Closing this out.

Sign in to add a comment