New issue
Advanced search Search tips

Issue 785969 link

Starred by 1 user

Issue metadata

Status: Verified
Owner:
Closed: Nov 2017
Components:
EstimatedDays: ----
NextAction: ----
OS: Chrome
Pri: 1
Type: Bug



Sign in to add a comment

Honor whitelisted extensions for webRequest API calls in public sessions

Project Member Reported by isandrk@chromium.org, Nov 16 2017

Issue description

WebRequest API was disallowed for extensions in public sessions except for whitelisted ones where it worked without any restrictions. crrev.com/2455393002 whitelisted webRequest for use in all extensions in public sessions, but it also restricted the webRequest API a bit for all extensions (even the whitelisted ones - didn't honor the whitelist). This broke some extensions that previously worked correctly (see b/66994755).
 
Labels: -Pri-3 Merge-Request-63 OS-Chrome Pri-1
So apparently the CL commit description got commited only to the linked b/66994755 (because I didn't open this bug yet or link it on the CL). Any way to fix that? Here's a link to the cl crrev.com/c/764147

Anyway, I'd like to merge this to M63 as it's affecting a customer (and possibly others who didn't bother reporting). I hope it works, but I also understand if it's too late in the process for that.
Project Member

Comment 2 by sheriffbot@chromium.org, Nov 16 2017

Labels: -Merge-Request-63 Merge-Review-63 Hotlist-Merge-Review
This bug requires manual review: M63 has already been promoted to the beta branch, so this requires manual review
Please contact the milestone owner if you have questions.
Owners: cmasso@(Android), cmasso@(iOS), gkihumba@(ChromeOS), govind@(Desktop)

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Comment 3 by gkihumba@google.com, Nov 16 2017

Labels: M-64
I would target M64 for this as we're 3 weeks away from stable.
Status: Fixed (was: Started)
Gotcha! Thanks for taking a look.

Comment 5 by gkihumba@google.com, Nov 28 2017

Labels: -Merge-Review-63

Comment 6 by gkihumba@google.com, Nov 28 2017

Labels: -Hotlist-Merge-Review ReleaseBlock-Beta
Adding RBB label for verification so it's on TPM radar
Status: Verified (was: Fixed)
Verified fixed. Whitelisted extension is honoring correctly in Public Session.

Public session configuration:
1. Add User-Agent Switcher for Chrome (ID: djflhoibgkdhkhhcedjiklpkjnoahfmg) in Device management > Chrome management > Public session settings > Force-installed Apps and Extensions
2. Upload a configuration json file in Chrome management > App management > User-Agent Switcher for Chrome > Public session settings
   uploaded Customer example file: https://drive.google.com/open?id=0B01ZVp8vDQocNUhvV08xTTZuNXc
3. Enable Public session kiosks in Chrome management > Device settings
4. Restart the managed device and check chrome://policy
5. Go to whatsmyuseragent.org (S=107 IS added)

Chrome OS: 10452.1.0
Chrome: 66.0.3359.10
Device: Santa

Sign in to add a comment