Prune extensions in signin page |
||||||
Issue descriptionThe current whitelist: https://cs.chromium.org/chromium/src/extensions/common/api/_behavior_features.json?l=72-84 "E24F1786D842E91E74C27929B0B3715A4689A473", // Gnubby component extension "6F9E349A0561C78A0D3F41496FE521C5151C7F71", // Gnubby app "8EBDF73405D0B84CEABB8C7513C9B9FA9F1DC2CE", // Genius app (help) "06BE211D5F014BAB34BC22D9DDA09C63A81D828E", // Chrome OS XKB "3F50C3A83839D9C76334BCE81CDEC06174F266AF", // Virtual Keyboard "2F47B526FA71F44816618C41EC55E5EE9543FDCC", // Braille Keyboard "86672C8D7A04E24EFB244BF96FE518C4C4809F73", // Speech synthesis "1CF709D51B2B96CF79D00447300BD3BFBE401D21", // Mobile activation "D519188F86D9ACCEE0412007B227D9936EB9676B", // Gaia auth extension "40FF1103292F40C34066E023B8BE8CAE18306EAE", // Chromeos help "3C654B3B6682CA194E75AD044CEDE927675DDEE8", // Easy unlock "CBCC42ABED43A4B58FE3810E62AFFA010EB0349F", // PDF Viewer "2FCBCE08B34CCA1728A85F1EFBD9A34DD2558B2E" // ChromeVox We should remove the ones not used in the signin screen. Most (but not all), are added by ComponentLoader: https://cs.chromium.org/chromium/src/chrome/browser/extensions/component_loader.cc
,
Mar 16 2017
What's the motivation for pruning? Haven't been able to track down why PDF Viewer is enabled, but concerned about a Chesterton's Fence scenario by removing them without knowing why they were added in the first place.
,
Mar 16 2017
BTW, as per an offline discussion, seems that we still don't know whether there is a clear use case for the PDF Viewer in the sign-in profile. However, one potential scenario where one can imagine it being used there is the SAML login flow with a third-party page embedding a PDF document.
,
Mar 16 2017
And answering the question from comment 2: IIUC, the motivation for the pruning is 1) optimization, 2) security concerns.
,
May 14 2017
,
Sep 18 2017
@jdufault do we have metrics on how often these extensions are actually used? If we see that any are really and truly at zero usage, that'd be a good case for removing them.
,
Sep 18 2017
I'm not aware of any metrics at the moment. This is something we should address as part of views-signin.
,
Aug 31
,
Dec 13
|
||||||
►
Sign in to add a comment |
||||||
Comment 1 by achuith@chromium.org
, Feb 22 2017