DeveloperToolsDisabled policy can be bypassed with --remote-debugging-port flag. |
||||||||||||
Issue descriptionRepro (only tried Linux): 1) Disable DevTools via policy https://www.chromium.org/administrators/policy-list-3#DeveloperToolsDisabled. 2) Launch chrome with --remote-debugging-port=9222 3) Open a new tab and navigate on any website. 4) Launch a different Chrome instance (specifically one without the policy) 5) Go to chrome://inspect/#devices 6) Find the entry corresponding to the Chrome instance from 2 and click Inspect. Expected: DevTools should not open since host instance has the policy. Actual: DevTools opens, ignoring the host's policy.
,
Mar 19 2018
Tested this issue on GPO Test environment(Windows) Preconditions: 1. Enabled the "Disable devtools policy" 2. Updated the policy in client machine and launched chrome with --remote-debugging-port=9222 Steps Followed: 1. Confirm the devtools are disabled 2. Navigate to test url like "https://duckduckgo.com" 3. In the new tab navigate to "localhost:9222" 4. Click on the url Observations: I was able to inspect the test url Attaching the screen-cast for reference. dpapad@ Could you confirm this is the issue you are facing???
,
Mar 23 2018
,
Mar 23 2018
@kkaluri: No these are not the steps I followed and described originally. > 3. In the new tab navigate to "localhost:9222" > 4. Click on the url Step 3 is not what I did. Need to go to a new chrome instance (different user-data-dir, and ensure that the policy is not applied for that instance). This can be either on the same or on a different computer entirely. Step 4: Go to chrome://inspect, not localhost:9222. I don't know if the steps described here are equivalent to the bug I am observing.
,
Mar 26 2018
This is interesting question - whether remote dev tools should be disabled when the policy is in effect. It sounds to me like they should but let's broadcast the question more widely.
,
Apr 2 2018
,
Apr 3 2018
Blumberg - you have an opinion here? Not really a cros issue because you have to be in dev mode to enable remote debugging at which point all policies are moot.
,
Apr 6 2018
+privard for his input as well. I think that request makes sense. Could we envision a scenario where an admin would like to disable dev tools but keep the remote (maybe there is a valid usecase for that?). In which case, maybe a separate policy for the remote debugging is more appropriate.
,
Apr 13 2018
,
Aug 1
,
Oct 31
,
Dec 10
|
||||||||||||
►
Sign in to add a comment |
||||||||||||
Comment 1 by dpa...@chromium.org
, Mar 15 2018