胆结石是什么原因导致的
|
七月十日是什么星座
|
激素脸是什么样子
|
无奇不有是什么意思
|
方圆脸适合什么发型
|
感冒吃什么好的快
|
两点水的字和什么有关
|
不想要孩子用什么办法最好
|
468是什么意思
|
空调滤芯什么牌子好
|
悬案是什么意思
|
看心脏病挂什么科
|
同房后小腹痛什么原因
|
一直发低烧是什么原因
|
牙龈出血用什么药
|
补气血喝什么泡水
|
一孕傻三年是什么意思
|
遮羞布是什么意思
|
坐月子适合吃什么水果
|
npv是什么意思
|
怀孕白细胞高是什么原因
|
瀹是什么意思
|
什么南瓜
|
口腹蜜剑什么意思
|
穿刺是检查什么的
|
掉发是什么原因
|
辣椒是什么时候传入中国的
|
胃出血吃什么药好
|
人的五官是什么
|
开山鼻祖是什么意思
|
64年属什么
|
直爽是什么意思
|
薄荷长什么样
|
红斑狼疮复发的症状是什么
|
白兰地属于什么酒
|
丨什么意思
|
alds是什么病
|
www是什么
|
补充胶原蛋白吃什么最好
|
前辈是什么意思
|
懂事是什么意思
|
丹毒病是什么原因引起的
|
痔疮的表现症状是什么
|
梦见蛇吃人代表什么预兆
|
误机是什么意思
|
柳下惠姓什么
|
肝脏彩超能检查出什么
|
胎儿双侧肾盂无分离是什么意思
|
胎心胎芽最晚什么时候出现
|
不偏不倚是什么意思
|
反差萌是什么意思
|
肚子容易饿是什么原因
|
堂是什么意思
|
下肢水肿是什么原因
|
一月18号是什么星座
|
女生肚脐眼下面疼是什么原因
|
恶心想吐是什么原因
|
老人生日送什么礼物好
|
华西医院院长什么级别
|
fte是什么意思
|
negative什么意思
|
4月18号是什么星座
|
hpv感染用什么药
|
大陆人去香港需要什么证件
|
低压高吃什么降压药
|
胳膊麻是什么原因
|
o型血与b型血生的孩子是什么血型
|
灰指甲用什么药最有效
|
昏昏欲睡是什么意思
|
蕃秀什么意思
|
免是什么意思
|
梦到自己掉头发是什么预兆
|
冠心病需要做什么检查
|
黄芪煲汤和什么搭配
|
tct检查什么项目
|
什么什么的天空
|
坚果补充什么营养成分
|
到是什么意思
|
cm是什么单位
|
弓耳念什么
|
睡觉憋气是什么原因引起的
|
吃万艾可有什么副作用
|
diy什么意思
|
今年21岁属什么生肖
|
什么品种荔枝最好吃
|
血虚肝旺有什么症状有哪些
|
amh是什么检查项目
|
肝不好吃什么
|
苦瓜汤为什么要放黄豆
|
梅毒是什么症状图片
|
担心是什么意思
|
衤叫什么偏旁
|
保鲜袋什么材质好
|
2004年出生属什么
|
买什么意思
|
中性粒细胞计数偏高是什么意思
|
代言是什么意思
|
梦见玫瑰花是什么预兆
|
莹五行属性是什么
|
空调病吃什么药
|
罗汉果有什么功效
|
骨钙素是什么
|
碘伏和络合碘有什么区别
|
2002年是什么年
|
黄褐斑内调吃什么药
|
滞是什么意思
|
千里马比喻什么样的人
|
一带一路指的是什么
|
世界上最难的字是什么
|
梦见孩子哭是什么意思
|
伶字五行属什么
|
中国最长的河流是什么河
|
牙龈肿痛发炎吃什么药
|
属龙本命佛是什么佛
|
渎神是什么意思
|
什么是渎职
|
爱出汗的人是什么原因
|
子宫内膜薄有什么危害
|
将军指什么生肖
|
审时度势是什么意思
|
梦见爆炸是什么意思
|
腰间盘突出压迫神经什么症状
|
番茄和蕃茄有什么区别
|
包饺子是什么意思
|
打胎药叫什么名字
|
窍是什么意思
|
什么花的花语是自由
|
脑子萎缩是什么原因造成的
|
岚字五行属什么
|
18年是什么婚
|
欠钱不还被起诉会有什么后果
|
包皮过长会有什么影响
|
唯利是图是什么生肖
|
脚有酸味是什么原因
|
人皇是什么意思
|
西游记是什么朝代
|
陶氏腔积液是什么意思
|
co2是什么意思
|
国资委什么级别
|
脂蛋白a高吃什么药
|
涅盘什么意思
|
尿液浑浊是什么原因
|
为什么生化妊娠是好事
|
三文鱼和什么不能一起吃
|
什么的什么好吃
|
碱是什么
|
支气管炎吃什么药有效
|
性生活频繁有什么危害
|
热伤风是什么意思
|
国家专项是什么意思
|
john是什么意思
|
十一月二十八是什么星座
|
成都什么地方好玩
|
夜尿多吃什么药
|
一个三点水一个有读什么字
|
窦性早搏是什么意思
|
郭敬明为什么叫小四
|
熬药用什么锅熬最好
|
蒙脱石散是什么成分
|
山竹什么人不能吃
|
博爱是什么意思
|
太子是什么意思
|
梦见摘菜是什么意思
|
宫颈机能不全是什么意思
|
痛苦是什么意思
|
口干舌燥吃什么药
|
大姨妈发黑是什么原因
|
什么油好
|
10月出生是什么星座
|
心悸心慌焦虑吃什么药能缓解
|
百合病是什么病
|
大头虾是什么意思
|
什么炒肉好吃
|
波长是什么
|
射手座的幸运色是什么颜色
|
凤梨跟菠萝有什么区别
|
风寒水饮是什么意思
|
dha什么牌子最好最安全
|
零和博弈什么意思
|
水生木是什么意思
|
为什么男人喜欢女人
|
为什么牙齿晚上痛白天不痛
|
吃什么子宫肌瘤会消除
|
嘚是什么意思
|
世界上最难写的字是什么字
|
身体怕热是什么原因
|
什么是事实婚姻
|
白介素6升高说明什么
|
芈怎么读什么意思
|
眼皮黑是什么原因
|
码放是什么意思
|
生理期没来是什么原因
|
右眼皮跳是什么预兆男
|
什么球身上长毛
|
干贝是什么东西做的
|
便秘喝什么
|
人乳头瘤病毒56型阳性是什么意思
|
太极贵人是什么意思
|
喝什么水最解渴
|
白细胞减少吃什么药
|
口舌生疮是什么原因
|
心跳过快是什么原因
|
狂风暴雨是什么生肖
|
下面潮湿是什么原因引起的
|
脂肪肝是什么症状
|
肝右叶低密度灶是什么意思
|
普通的近义词是什么
|
软骨炎是什么病
|
奶酪是什么东西
|
宰相相当于现在什么官
|
时光荏苒岁月如梭是什么意思
|
心火旺吃什么药效果最好
|
四肢百骸是什么意思
|
怀孕一个月吃什么对宝宝发育好
|
什么冰淇淋最贵
|
什么牌子充电宝好
|
经常反义词是什么
|
易孕体质有什么特征
|
9月份是什么星座的
|
吃什么都拉肚子怎么回事
|
尿痛吃什么药
|
左脸颊长痘是什么原因
|
十个一是什么
|
洗了牙齿要注意什么
|
脾囊肿是什么原因引起的
|
雨水是什么季节
|
照烧是什么意思
|
老叹气是什么原因
|
sancanal是什么牌子
|
举措前面搭配什么
|
癫痫患者不能吃什么
|
关联词是什么意思
|
邪气入体是什么症状
|
老是说梦话是什么原因
|
梦见自己爷爷死了是什么预兆
|
东南西北五行属什么
|
抗锯齿是什么意思
|
五月三十一号是什么星座
|
什么是工作日
|
跑步穿什么衣服
|
肝脓肿是什么病严重吗
|
骨转移用什么药
|
尤文氏肉瘤是什么病
|
画画可以画什么
|
莫名其妙的心情不好是什么原因
|
羊肉和什么菜搭配最好
|
注解是什么意思
|
怀孕甲减对孩子有什么影响
|
骨龄挂什么科
|
天什么地
|
提辖相当于现在什么官
|
梦见小白蛇是什么预兆
|
上午12点是什么时候
|
妃是什么意思
|
au585是什么金
|
光圈是什么
|
醒酒最快的方法是什么
|
基数大是什么意思
|
什么叫磁场
|
无话不谈是什么意思
|
飞机上什么东西不能带
|
为什么早上起来眼睛肿
|
桂花像什么
|
胆囊粗糙是什么意思
|
百度
Chromium Blog
News and developments from the open source browser project
Trustworthy Chrome Extensions, by default
Monday, October 1, 2018
Incredibly, it’s been nearly a decade since we launched the Chrome extensions system. Thanks to the hard work and innovation of our developer community, there are now more than 180,000 extensions in the
Chrome Web Store
, and nearly half of Chrome desktop users actively use extensions to customize Chrome and their experience on the web.
The extensions team's dual mission is to help users tailor Chrome’s functionality to their individual needs and interests, and to empower developers to build rich and useful extensions. But, first and foremost, it’s crucial that users be able to trust the extensions they install are safe, privacy-preserving, and performant. Users should always have full transparency about the scope of their extensions’ capabilities and data access.
We’ve recently taken a number of steps toward improved extension security with the launch of
out-of-process iframes
, the
removal of inline installation
, and significant advancements in our ability to detect and block malicious extensions using machine learning. Looking ahead, there are more fundamental changes needed so that all Chrome extensions are trustworthy by default.
Today we’re announcing some upcoming changes and plans for the future:
User controls for host permissions
Beginning in Chrome 70, users will have the choice to restrict extension
host access
to a custom list of sites, or to configure extensions to require a click to gain access to the current page.
While host permissions have enabled thousands of powerful and creative extension use cases, they have also led to a broad range of misuse - both malicious and unintentional - because they allow extensions to automatically read and change data on websites. Our aim is to improve user transparency and control over when extensions are able to access site data. In subsequent milestones, we’ll continue to optimize the user experience toward this goal while improving usability. If your extension requests host permissions, we encourage you to review our
transition guide
and begin testing as soon as possible.
Changes to the extensions review process
Going forward, extensions that request powerful permissions will be subject to additional compliance review. We’re also looking very closely at extensions that use remotely hosted code, with ongoing monitoring. Your extension’s permissions should be as
narrowly-scoped
as possible, and all your code should be included directly in the extension package, to minimize review time.
New code readability requirements
Starting today, Chrome Web Store will no longer allow extensions with obfuscated code. This includes code within the extension package as well as any external code or resource fetched from the web. This policy applies immediately to all new extension submissions. Existing extensions with obfuscated code can continue to submit updates over the next 90 days, but will be removed from the Chrome Web Store in early January if not compliant.
Today over 70% of malicious and policy violating extensions that we block from Chrome Web Store contain obfuscated code. At the same time, because obfuscation is mainly used to conceal code functionality, it adds a great deal of complexity to our review process. This is no longer acceptable given the aforementioned review process changes.
Additionally, since JavaScript code is always running locally on the user's machine, obfuscation is insufficient to protect proprietary code from a truly motivated reverse engineer. Obfuscation techniques also come with hefty performance costs such as slower execution and increased file and memory footprints.
Ordinary minification, on the other hand, typically speeds up code execution as it reduces code size, and is much more straightforward to review. Thus, minification will still be allowed, including the following techniques:
Removal of whitespace, newlines, code comments, and block delimiters
Shortening of variable and function names
Collapsing the number of JavaScript files
If you have an extension in the store with obfuscated code, please review our updated
content policies
as well as our
recommended minification techniques
for Google Developers, and submit a new compliant version before January 1st, 2019.
Required 2-Step Verification
In 2019, enrollment in
2-Step Verification
will be required for Chrome Web Store developer accounts. If your extension becomes popular, it can attract attackers who want to steal it by hijacking your account, and 2-Step Verification adds an extra layer of security by requiring a second authentication step from your phone or a
physical security key
. We strongly recommend that you
enroll
as soon as possible.
For even stronger account security, consider the
Advanced Protection Program
. Advanced protection offers the same level of security that Google relies on for its own employees, requiring a physical security key to provide the strongest defense against phishing attacks.
Looking ahead: Manifest v3
In 2019 we will introduce the next extensions manifest version. Manifest v3 will entail additional platform changes that aim to create stronger security, privacy, and performance guarantees. We want to help all developers
fall into the pit of success
; writing a secure and performant extension in Manifest v3 should be easy, while writing an insecure or non-performant extension should be difficult.
Some key goals of manifest v3 include:
More narrowly-scoped and declarative APIs, to decrease the need for overly-broad access and enable more performant implementation by the browser, while preserving important functionality
Additional, easier mechanisms for users to control the permissions granted to extensions
Modernizing to align with new web capabilities, such as supporting Service Workers as a new type of background process
We intend to make the transition to manifest v3 as smooth as possible and we’re thinking carefully about the rollout plan. We’ll be in touch soon with more specific details.
We recognize that some of the changes announced today may require effort in the future, depending on your extension. But we believe the collective result will be worth that effort for all users, developers, and for the long term health of the Chrome extensions ecosystem. We’re committed to working with you to transition through these changes and are very interested in your feedback. If you have questions or comments, please get in touch with us on the
Chromium extensions forum
.
Posted by James Wagner, Chrome Extensions Product Manager
Labels
$200K
1
10th birthday
4
abusive ads
1
abusive notifications
2
accessibility
3
ad blockers
1
ad blocking
2
advanced capabilities
1
android
2
anti abuse
1
anti-deception
1
background periodic sync
1
badging
1
benchmarks
1
beta
83
better ads standards
1
billing
1
birthday
4
blink
2
browser
2
browser interoperability
1
bundles
1
capabilities
6
capable web
1
cds
1
cds18
2
cds2018
1
chrome
35
chrome 81
1
chrome 83
2
chrome 84
2
chrome ads
1
chrome apps
5
Chrome dev
1
chrome dev summit
1
chrome dev summit 2018
1
chrome dev summit 2019
1
chrome developer
1
Chrome Developer Center
1
chrome developer summit
1
chrome devtools
1
Chrome extension
1
chrome extensions
3
Chrome Frame
1
Chrome lite
1
Chrome on Android
2
chrome on ios
1
Chrome on Mac
1
Chrome OS
1
chrome privacy
4
chrome releases
1
chrome security
10
chrome web store
32
chromedevtools
1
chromeframe
3
chromeos
4
chromeos.dev
1
chromium
9
cloud print
1
coalition
1
coalition for better ads
1
contact picker
1
content indexing
1
cookies
1
core web vitals
2
csrf
1
css
1
cumulative layout shift
1
custom tabs
1
dart
8
dashboard
1
Data Saver
3
Data saver desktop extension
1
day 2
1
deceptive installation
1
declarative net request api
1
design
2
developer dashboard
1
Developer Program Policy
2
developer website
1
devtools
13
digital event
1
discoverability
1
DNS-over-HTTPS
4
DoH
4
emoji
1
emscriptem
1
enterprise
1
extensions
27
Fast badging
1
faster web
1
features
1
feedback
2
field data
1
first input delay
1
Follow
1
fonts
1
form controls
1
frameworks
1
fugu
2
fund
1
funding
1
gdd
1
google earth
1
google event
1
google io 2019
1
google web developer
1
googlechrome
12
harmful ads
1
html5
11
HTTP/3
1
HTTPS
4
iframes
1
images
1
incognito
1
insecure forms
1
intent to explain
1
ios
1
ios Chrome
1
issue tracker
3
jank
1
javascript
5
lab data
1
labelling
1
largest contentful paint
1
launch
1
lazy-loading
1
lighthouse
2
linux
2
Lite Mode
2
Lite pages
1
loading interventions
1
loading optimizations
1
lock icon
1
long-tail
1
mac
1
manifest v3
2
metrics
2
microsoft edge
1
mixed forms
1
mobile
2
na
1
native client
8
native file system
1
New Features
5
notifications
1
octane
1
open web
4
origin trials
2
pagespeed insights
1
pagespeedinsights
1
passwords
1
payment handler
1
payment request
1
payments
2
performance
20
performance tools
1
permission UI
1
permissions
1
play store
1
portals
3
prefetching
1
privacy
2
privacy sandbox
4
private prefetch proxy
1
profile guided optimization
1
progressive web apps
2
Project Strobe
1
protection
1
pwa
1
QUIC
1
quieter permissions
1
releases
3
removals
1
rlz
1
root program
1
safe browsing
2
Secure DNS
2
security
36
site isolation
1
slow loading
1
sms receiver
1
spam policy
1
spdy
2
spectre
1
speed
4
ssl
2
store listing
1
strobe
2
subscription pages
1
suspicious site reporter extension
1
TCP
1
the fast and the curious
23
TLS
1
tools
1
tracing
1
transparency
1
trusted web activities
1
twa
2
user agent string
1
user data policy
1
v8
6
video
2
wasm
1
web
1
web apps
1
web assembly
2
web developers
1
web intents
1
web packaging
1
web payments
1
web platform
1
web request api
1
web vitals
1
web.dev
1
web.dev live
1
webapi
1
webassembly
1
webaudio
3
webgl
7
webkit
5
WebM
1
webmaster
1
webp
5
webrtc
6
websockets
5
webtiming
1
writable-files
1
yerba beuna center for the arts
1
Archive
2025
Jul
Jun
May
Jan
2024
Dec
Aug
Jun
May
Apr
Mar
Feb
2023
Nov
Oct
Sep
Aug
Jun
May
Apr
Feb
2022
Dec
Sep
Aug
Jun
May
Apr
Mar
Feb
Jan
2021
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2020
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2019
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2018
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2017
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2016
Dec
Nov
Oct
Sep
Aug
Jun
May
Apr
Mar
Feb
Jan
2015
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2014
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2013
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2012
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2011
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2010
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2009
Dec
Nov
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2008
Dec
Nov
Oct
Sep
Feed
Follow @ChromiumDev
Give us feedback in our
Product Forums
.
前列腺多发钙化灶是什么意思
鹅吃什么草
在农村干什么挣钱
慢性胃炎要吃什么药
散粉和粉饼有什么区别
绿色属于五行属什么
巴豆是什么
屁多且臭是什么原因
心脏突然剧烈跳动是什么原因
闲情雅致是什么意思
教义是什么意思
小排畸主要查什么
什么是老公
leg是什么意思
mri是什么意思
排尿带血是什么原因
太形象了是什么意思
友尽是什么意思
ykk是什么牌子
雌二醇测定是什么检查
酸奶什么时候喝好jasonfriends.com
胆汁反流是什么意思hcv9jop1ns0r.cn
锁阳是什么东西hcv9jop6ns2r.cn
拔草是什么意思hcv8jop9ns6r.cn
quilt什么意思hcv8jop1ns3r.cn
接吻要注意什么hcv8jop8ns1r.cn
提溜是什么意思hcv8jop3ns2r.cn
次抛是什么意思hcv8jop4ns3r.cn
不孕不育的症状是什么hcv9jop8ns2r.cn
圣母什么意思1949doufunao.com
勃起不坚吃什么药hcv8jop1ns0r.cn
手经常抖是什么原因hcv8jop9ns8r.cn
较前相仿是什么意思hcv9jop0ns5r.cn
阴瑜伽是什么意思hcv9jop1ns8r.cn
打夜针是什么意思hcv8jop3ns9r.cn
男人眉心有痣代表什么inbungee.com
眼睑痉挛是什么原因造成的hcv9jop3ns7r.cn
慢性阑尾炎吃什么药hcv9jop5ns9r.cn
4月29号0点是什么时候hcv7jop5ns0r.cn
什么时候吃苹果最好hcv9jop7ns1r.cn
百度
