New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 865783 link

Starred by 3 users

Issue metadata

Status: Assigned
Owner:
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux , Windows , Chrome , Mac
Pri: 2
Type: Feature



Sign in to add a comment

Provide ExtensionSettings option to whitelist all extensions of type

Reported by samuel.k...@airbnb.com, Jul 19

Issue description

UserAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3493.3 Safari/537.36

Steps to reproduce the problem:
1. Move to extension whitelisting, blacklisting * and individually whitelisting extensions
2. Users want to install new Chrome themes but are blocked
3. Don't want to security review harmless themes.

What is the expected behavior?

What went wrong?
We've moved to extension whitelisting, which has improved our security posture quite well.  However, we've ended up whitelisting hundreds of themes and users try to install new ones and are blocked from doing so.

Because themes have no control over the browser and consist only of UI elements, we are okay with users installing any theme of their choosing.  However, if they choose one which isn't on our whitelist, they are blocked from installing it.

We'd like to have an option to whitelist all extensions of a type, in this case theme.  This would allow our users to personalize the browser as they see fit, allow us to remove a good chunk of our whitelist, and not give up any of our security posture.

Did this work before? No 

Chrome version: 69.0.3493.3  Channel: dev
OS Version: OS X 10.14.0
Flash Version:
 
Labels: -Type-Bug Enterprise-Triaged OS-Chrome OS-Linux OS-Windows Type-Feature
Owner: privard@chromium.org
Assigning to privard@ for prioritization.
Status: Untriaged (was: Unconfirmed)
Cc: goanuj@chromium.org
Owner: jawag@chromium.org
Status: Assigned (was: Untriaged)

Sign in to add a comment