Provide ExtensionSettings option to whitelist all extensions of type
Reported by
samuel.k...@airbnb.com,
Jul 19
|
|||
Issue descriptionUserAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3493.3 Safari/537.36 Steps to reproduce the problem: 1. Move to extension whitelisting, blacklisting * and individually whitelisting extensions 2. Users want to install new Chrome themes but are blocked 3. Don't want to security review harmless themes. What is the expected behavior? What went wrong? We've moved to extension whitelisting, which has improved our security posture quite well. However, we've ended up whitelisting hundreds of themes and users try to install new ones and are blocked from doing so. Because themes have no control over the browser and consist only of UI elements, we are okay with users installing any theme of their choosing. However, if they choose one which isn't on our whitelist, they are blocked from installing it. We'd like to have an option to whitelist all extensions of a type, in this case theme. This would allow our users to personalize the browser as they see fit, allow us to remove a good chunk of our whitelist, and not give up any of our security posture. Did this work before? No Chrome version: 69.0.3493.3 Channel: dev OS Version: OS X 10.14.0 Flash Version:
,
Aug 14
,
Oct 29
|
|||
►
Sign in to add a comment |
|||
Comment 1 by macourteau@chromium.org
, Jul 20Owner: privard@chromium.org