implement pinned version in ExtensionSettings |
|||||||
Issue descriptionSome enterprise customers want to be able to force a specific version of an extension to be used. eg. "specific_version_required" or "pinned_version_required" : maps to a version string. The format of the version string is the same as the one used in extension manifest, as described at https://developer.chrome.com/apps/manifest/version. An extension with a version other than the specified version will be disabled and will be noted in chrome://policy. This applies to force-installed extensions as well.
,
Oct 26
Pinning provides the controls for enterprise customers and they knowingly know that the compromise is at the price of security for stability when they do. I do like the idea of having the mechanism to alert both admin/user when a pinned version is vulnerable (having control over not alerting the user would likely be required by admins) Perhaps this can be done with our enterprise reporting capability.
,
Nov 13
Issue 904849 has been merged into this issue.
,
Nov 14
I'll echo nrpeter@'s comment that we don't keep the old version in the store, which is problematic. What would we do if a fresh install needs an older version?
,
Nov 16
I agree it would be difficult to backport this feature to extensions written with Manifest-v2, but the Chrome Web Store could keep multiple versions of extensions with Manifest-v3. This would give developers an incentive to move to v3 as well. Just a FYI that Manifest v3 is public now: https://docs.google.com/document/d/1nPu6Wy4LWR66EFLeYInl3NzzhHzc-qnk4w4PX-0XMw8/edit#
,
Nov 27
,
Nov 28
We're now tracking this in the extensions product backlog as a possible feature to implement for manifest v3 extensions. We'll pick this bug up again in the future as manifest v3 implementation progresses.
,
Nov 29
,
Dec 7
I wanted to also add that with pinning, there is also a request to be able to rollback to an older extension. This might be considered a separate FR. But I wanted to also highlight this here.
,
Dec 20
|
|||||||
►
Sign in to add a comment |
|||||||
Comment 1 by nrpeter@chromium.org
, Oct 26