• Devlin Cronin's avatar
    [Extensions] Remove permission warning for externally connectable sites · fb5fd69e
    Devlin Cronin authored
    Remove the permission warning for externally connectable sites. This
    warning previously indicated that an extension could "Communicate with
    cooperating websites", and was shown when an extension specified
    "externally_connectable" in the manifest with any "matches" (i.e.,
    websites). This allowed websites to message extensions via
    runtime.sendMessage() and runtime.connect().
    
    This wasn't very useful. Any extension can communicate with cooperating
    websites without this capability, e.g. by being specified in the
    cooperating sites' ACAO, and just making an ordinary CORS request. This
    requires no permissions, because it is a normal web capability. (There
    are also other ways extensions can communicate, e.g. through
    web_accessible_resources).
    
    Remove the warning.
    
    Bug: 469602
    Change-Id: I8663125f268b4e031a0a83c4dd0fd886cc2a6457
    Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2148249Reviewed-by: default avatarMartin Šrámek <msramek@chromium.org>
    Reviewed-by: default avatarMustafa Emre Acer <meacer@chromium.org>
    Commit-Queue: Devlin <rdevlin.cronin@chromium.org>
    Cr-Commit-Position: refs/heads/master@{#759893}
    fb5fd69e
externally_connectable.cc 7.23 KB