眼泪多是什么原因
|
企业hr是什么意思
|
何首乌长什么样
|
拉屎的时候拉出血来是什么原因
|
我炸了是什么意思
|
为什么癌症治不好
|
栎字五行属什么
|
窦性心动过缓是什么病
|
左眼老是跳是什么原因
|
燕子喜欢吃什么
|
什么是公因数
|
梦见别人买房子是什么预兆
|
蛋白尿是什么病
|
贝字旁与什么有关
|
钮祜禄氏是什么旗
|
hy什么意思
|
阴阳两虚吃什么食物
|
父母什么血型会溶血
|
它是什么结构
|
济南为什么叫泉城
|
产前筛查是检查什么
|
心律不齐吃什么食物好
|
初中老师需要什么学历
|
什么情况下需要打破伤风针
|
狍子是什么动物
|
说话口臭是什么原因引起的
|
阿司匹林是什么
|
豚鼠吃什么食物
|
基数大是什么意思
|
今日属相是什么生肖
|
老人经常便秘有什么好办法
|
pumpkin是什么意思
|
扬州有什么好玩的
|
乳腺导管扩张吃什么药
|
头发麻是什么病的前兆
|
云南在古代叫什么
|
艾滋病的症状是什么样
|
为什么没人敢动景甜
|
双鱼座女和什么星座最配
|
彩字五行属什么
|
戴黄金对身体有什么好处
|
蛇蝎心肠是什么生肖
|
mint什么颜色
|
人到无求品自高什么意思
|
额窦炎吃什么药管用
|
女人十个簸箕是什么命
|
出圈是什么意思
|
办健康证要带什么证件
|
短裙配什么上衣好看
|
类风湿不能吃什么食物
|
芥菜什么时候种
|
中指尖麻木是什么原因
|
男人眉毛短是什么面相
|
感同身受什么意思
|
日加个立念什么
|
天王星是什么颜色
|
penguin是什么意思
|
乳糖不耐受不能吃什么
|
lz什么意思
|
绝经是什么意思
|
穿刺是什么检查
|
sig是什么意思
|
总梦到一个人说明什么
|
头晕在医院挂什么科
|
第一次见面送女生什么花
|
吐舌头是什么意思
|
什么的沙滩
|
鲫鱼不能和什么一起吃
|
拜土地公时要念什么好
|
1600年是什么朝代
|
经期喝茶有什么影响
|
小便黄是什么原因
|
口若悬河什么意思
|
动土破土是什么意思
|
吃什么补大脑记忆力
|
喝桦树茸有什么好处
|
慢性非萎缩性胃炎伴糜烂是什么意思
|
胃复安又叫什么
|
治疗呼吸道感染用什么药最好
|
梦见猫头鹰是什么预兆
|
炖猪排骨放什么调料
|
1991年属羊是什么命
|
虚劳病是什么意思
|
牙龈有点发黑是什么原因
|
血常规24项能查出什么病
|
氯雷他定不能和什么药一起吃
|
出尔反尔是什么意思
|
西瓜跟什么不能一起吃
|
菊苣别名叫什么
|
宫颈息肉吃什么药能消
|
半盏流年是什么意思
|
神经衰弱有什么症状
|
侍郎是什么官
|
寒门子弟是什么意思
|
包皮开裂用什么药
|
有狐臭是什么原因
|
麻风病是什么
|
西夏国是现在什么地方
|
儿童办护照需要什么材料
|
宫颈纳氏囊肿什么意思
|
孩子嗓子疼吃什么药
|
今晚吃什么
|
皮肤真菌感染用什么药
|
蚱蜢吃什么食物
|
聿字五行属什么
|
淡盐水是什么
|
白头发多吃什么食物能变黑
|
月经粉红色是什么原因
|
紫苏叶有什么功效
|
得瑟什么意思
|
蛇胆是什么
|
阴雨连绵是什么意思
|
三生石是什么意思
|
什么气
|
脚背痛什么原因引起的
|
张学友和张家辉什么关系
|
柠檬酸是什么添加剂
|
什么程度要做肾穿刺
|
妈妈是什么意思
|
羊肉饺子馅配什么蔬菜最好吃
|
牛标志的车是什么牌子
|
拔罐有什么好处和坏处
|
吃什么能降尿蛋白
|
返利是什么意思
|
脑梗挂什么科
|
跑步什么时候跑最好
|
铃字五行属什么
|
rfc是什么意思
|
太阳是一颗什么星
|
血压低吃什么能补上来
|
李世民属什么生肖
|
煮馄饨放什么调料
|
白兰地属于什么酒
|
黑色屎是什么原因
|
蛇缠腰是什么
|
黄皮什么时候成熟
|
舔是什么意思
|
蚊子最怕什么气味
|
狐狸和乌鸦告诉我们什么道理
|
肝病不能吃什么
|
保释金是什么意思
|
小便有点红是什么原因
|
纣王叫什么名字
|
广西属于什么地区
|
什么是达人
|
出身是什么意思
|
女人为什么会来月经
|
什么的嘴巴
|
头发为什么会变黄
|
绿茶妹是什么意思
|
冠心病需要做什么检查
|
雌二醇高有什么症状
|
过氧化氢浓度阳性是什么意思
|
痛经可以吃什么水果
|
通告是什么意思
|
qn医学上是什么意思
|
氧饱和度是什么意思
|
脑利钠肽前体值高预示什么
|
客厅用什么灯具好
|
牛肉和什么炒
|
记忆力差是什么原因
|
蔻驰香水属于什么档次
|
北瓜是什么瓜
|
黑曜石适合什么人戴
|
什么邮票最值钱
|
高胆固醇血症是什么意思
|
对立面是什么意思
|
金卡有什么好处和坏处
|
fgr医学上是什么意思
|
自然色是什么颜色
|
中耳炎吃什么
|
大拇指抖动是什么原因引起的
|
阿迪达斯是什么牌子
|
疝气是什么
|
什么麻料最好
|
什么人不适合喝咖啡
|
黑头发有什么好处
|
蘑菇不能和什么一起吃
|
忽然流鼻血是什么原因引起的
|
骨科是什么意思
|
多囊为什么要跳绳而不是跑步
|
什么危不什么
|
大校军衔是什么级别
|
哀大莫过于心死是什么意思
|
乳房突然疼痛什么原因
|
口干口苦是什么病
|
3月16日什么星座
|
太白金星是什么神
|
柠檬和什么一起泡减肥
|
别有洞天是什么生肖
|
精气是什么意思
|
口粮是什么意思
|
吃什么可以提高新陈代谢
|
什么的叮咛
|
西地那非是什么药物
|
高字是什么结构
|
伊朗是什么民族
|
flour什么意思
|
有什么鱼
|
为什么会鬼压床
|
为什么会得梅毒
|
第三者责任险是什么意思
|
胸腔积液吃什么药最有效
|
口干口臭什么原因引起的
|
头发硬适合什么发型
|
吃什么对牙齿好
|
三月18号是什么星座的
|
竹叶青是什么
|
十月十五号是什么星座
|
心脏早博吃什么药好
|
意思是什么意思
|
洗牙后要注意什么
|
红牛什么时候喝效果好
|
pci手术全称是什么
|
星期五右眼皮跳是什么预兆
|
嘴唇干裂是什么原因引起的
|
圣诞节是什么时候
|
中书舍人是什么官职
|
辣木籽是什么
|
society是什么意思
|
风油精有什么作用
|
脆皖鱼是什么鱼
|
芮字五行属什么
|
实至名归是什么意思
|
小苏打可以用什么代替
|
脑部磁共振检查什么
|
人流前需要检查什么项目
|
失聪是什么原因造成的
|
sorona是什么面料
|
离心是什么意思
|
下巴底下长痘痘是什么原因
|
腰花是什么部位
|
胃萎缩是什么意思
|
事后紧急避孕药什么时候吃有效
|
o型血rh阳性是什么意思
|
三湖慈鲷可以和什么鱼混养
|
dht是什么
|
一孕傻三年是什么意思
|
bso是什么意思
|
血糖高吃什么水果好
|
金骏眉茶是什么茶
|
买二手苹果手机要注意什么
|
生理盐水是什么东西
|
智齿疼吃什么药
|
投其所好是什么意思
|
edp是什么意思
|
巴基斯坦是什么语言
|
郭靖黄蓉是什么电视剧
|
生日送什么礼物最好
|
心绞痛吃什么药缓解最快
|
关二爷是什么神
|
故友是什么意思
|
新生儿血糖低是什么原因
|
检验葡萄糖用什么试剂
|
熠字五行属什么
|
睡觉喜欢流口水是什么原因
|
蠕动什么意思
|
冬至吃什么馅的饺子
|
微量泵是干什么用的
|
吃软不吃硬是什么生肖
|
徒手是什么意思
|
更年期燥热吃什么食物
|
4月24号是什么星座
|
晦气是什么意思
|
百度
Chromium Blog
News and developments from the open source browser project
Web Request and Declarative Net Request: Explaining the impact on Extensions in Manifest V3
Wednesday, June 12, 2019
The Story So Far
As part of an effort to increase user security and privacy, Chrome is planning a number of changes to the extensions platform. We
announced some of these changes
last October, and have provided
additional context
on them today
.
These changes to the platform are being implemented as part of Manifest V3 – the next version of the Chrome Extensions platform.
One of these changes is to move away from the blocking version of the
Web Request API
towards a new API, called
Declarative Net Request
. There’s been a lot of confusion and misconception around both the motivations and implications of this change, including speculation that these changes were designed to prevent or weaken ad blockers. This is absolutely not the goal. In fact, this change is meant to give developers a way to create safer and more performant ad blockers.
In order to improve the security and privacy guarantees of the extensions platform, we are rethinking some of the extension platform's core APIs. That's why we're planning to replace the blocking Web Request API with the Declarative Net Request API.
How Web Request Works
With Web Request, Chrome sends all the data in a network request to the listening extension - including any sensitive data contained in that request like personal photos or emails. The extension has a chance to evaluate the request, and then tells Chrome what to do with the request: allow it, block it, or send it with some modifications. As a result, extensions that leverage the Web Request API typically have access to read and manipulate everything a user does on the web.
While this API is used by good actors to implement powerful features like content blockers, it can also be - and has been - abused. Because all of the request data is exposed to the extension, it makes it very easy for a malicious developer to abuse that access to a user’s credentials, accounts, or personal information. Since January 2018, 42% of malicious extensions use the Web Request API.
In addition to these safety concerns, there are also significant performance costs. In most cases, these costs are
not
from the evaluation of the extension script processing events, but rather from everything else coordinating the script. That overall performance impact can be very large, even for an extension written as performantly as possible where the JavaScript execution time is negligible.
As it’s designed today, the blocking version of the Web Request API requires a persistent, long-running process, and is fundamentally incompatible with “lazy” processes - processes that can be set up or torn down as-needed, conserving valuable system resources. There are also significant costs associated with the serialization of the request data, the inter-process communication needed to send that data to the extensions, and the processing of extension responses.
Enter Declarative Net Request
The Declarative Net Request API works differently than the Web Request API. Instead of Chrome sending all the information about a request to the listening extensions at the time of the request, extensions register rules that tell Chrome what to do if certain types of requests are seen.
This approach has advantages for both user security and privacy, as well as performance. With a declarative approach, Chrome does not need to expose any sensitive data to the extension. The browser can perform the action requested by the extension without sending it all the data associated with the network request, because the extension already specified the conditions under which different actions are taken. This enables the extension to perform content blocking without needing access to all of a user’s personal information.
This has significant performance implications. Most importantly, a persistent, long-running process is no longer necessary because rules are registered before requests are made rather than needing to process them at runtime. This also cuts down on the cost of serializing all the request data and shuttling the inter-process messages to the listening extensions.
These performance improvements will make extensions significantly more viable on resource-constrained platforms.
Why Not Both?
In addition to the performance concerns raised above, the Chrome team strongly believes that users should not have to expose their emails, photos, social media, or any other sensitive data to an extension if the extension doesn’t actually need that access to perform its function. And historically, when extension developers are given the choice between capability and security, the vast majority of developers choose capability. We've seen this repeatedly on the extensions platform with event pages, optional permissions, and activeTab.
Enterprise
Enterprises, schools, and businesses often require different network and software controls to comply with corporate policies. Additionally, these organizations typically have administrators whose role it is to understand and set up their environments.
Chrome provides enterprise controls through its
administrator policies
. The blocking version of the Web Request API remains available for managed extensions because of the deep integrations that enterprises may have between their software suites and Chrome. System administrators can continue to manage Chrome in enterprise environments for free using OS-provided mechanisms to deploy Chrome
policies
.
Moving Forward
Declarative Net Request, and the whole of Manifest V3, is still very much in design and development. We are continuing to iterate on it, responding to community feedback and working with developers to help support different use cases.
Since the original announcement of the Declarative Net Request API, we have added significant functionality to the API as a result of these discussions. The Declarative Net Request API now allows for the registration and removal of dynamic rules - specified at runtime rather than statically in the manifest. We’ve also added the capability to remove common tracking headers, such as Referer, Cookie, and Set-Cookie.
We are actively exploring other ways to expand this API, including adding methods to get feedback about matched rules, and support for richer redirects leveraging URL manipulation and regular expressions. Additionally, we are currently planning to change the rule limit from maximum of 30k rules per extension to a global maximum of 150k rules.
We will continue working with the developer community moving forward. We understand that adopting Manifest V3 will require developers to update their extensions and we will continue to support them through this transition.
Posted by
Simeon Vincent, Developer Advocate for Chrome Extensions
Labels
$200K
1
10th birthday
4
abusive ads
1
abusive notifications
2
accessibility
3
ad blockers
1
ad blocking
2
advanced capabilities
1
android
2
anti abuse
1
anti-deception
1
background periodic sync
1
badging
1
benchmarks
1
beta
83
better ads standards
1
billing
1
birthday
4
blink
2
browser
2
browser interoperability
1
bundles
1
capabilities
6
capable web
1
cds
1
cds18
2
cds2018
1
chrome
35
chrome 81
1
chrome 83
2
chrome 84
2
chrome ads
1
chrome apps
5
Chrome dev
1
chrome dev summit
1
chrome dev summit 2018
1
chrome dev summit 2019
1
chrome developer
1
Chrome Developer Center
1
chrome developer summit
1
chrome devtools
1
Chrome extension
1
chrome extensions
3
Chrome Frame
1
Chrome lite
1
Chrome on Android
2
chrome on ios
1
Chrome on Mac
1
Chrome OS
1
chrome privacy
4
chrome releases
1
chrome security
10
chrome web store
32
chromedevtools
1
chromeframe
3
chromeos
4
chromeos.dev
1
chromium
9
cloud print
1
coalition
1
coalition for better ads
1
contact picker
1
content indexing
1
cookies
1
core web vitals
2
csrf
1
css
1
cumulative layout shift
1
custom tabs
1
dart
8
dashboard
1
Data Saver
3
Data saver desktop extension
1
day 2
1
deceptive installation
1
declarative net request api
1
design
2
developer dashboard
1
Developer Program Policy
2
developer website
1
devtools
13
digital event
1
discoverability
1
DNS-over-HTTPS
4
DoH
4
emoji
1
emscriptem
1
enterprise
1
extensions
27
Fast badging
1
faster web
1
features
1
feedback
2
field data
1
first input delay
1
Follow
1
fonts
1
form controls
1
frameworks
1
fugu
2
fund
1
funding
1
gdd
1
google earth
1
google event
1
google io 2019
1
google web developer
1
googlechrome
12
harmful ads
1
html5
11
HTTP/3
1
HTTPS
4
iframes
1
images
1
incognito
1
insecure forms
1
intent to explain
1
ios
1
ios Chrome
1
issue tracker
3
jank
1
javascript
5
lab data
1
labelling
1
largest contentful paint
1
launch
1
lazy-loading
1
lighthouse
2
linux
2
Lite Mode
2
Lite pages
1
loading interventions
1
loading optimizations
1
lock icon
1
long-tail
1
mac
1
manifest v3
2
metrics
2
microsoft edge
1
mixed forms
1
mobile
2
na
1
native client
8
native file system
1
New Features
5
notifications
1
octane
1
open web
4
origin trials
2
pagespeed insights
1
pagespeedinsights
1
passwords
1
payment handler
1
payment request
1
payments
2
performance
20
performance tools
1
permission UI
1
permissions
1
play store
1
portals
3
prefetching
1
privacy
2
privacy sandbox
4
private prefetch proxy
1
profile guided optimization
1
progressive web apps
2
Project Strobe
1
protection
1
pwa
1
QUIC
1
quieter permissions
1
releases
3
removals
1
rlz
1
root program
1
safe browsing
2
Secure DNS
2
security
36
site isolation
1
slow loading
1
sms receiver
1
spam policy
1
spdy
2
spectre
1
speed
4
ssl
2
store listing
1
strobe
2
subscription pages
1
suspicious site reporter extension
1
TCP
1
the fast and the curious
23
TLS
1
tools
1
tracing
1
transparency
1
trusted web activities
1
twa
2
user agent string
1
user data policy
1
v8
6
video
2
wasm
1
web
1
web apps
1
web assembly
2
web developers
1
web intents
1
web packaging
1
web payments
1
web platform
1
web request api
1
web vitals
1
web.dev
1
web.dev live
1
webapi
1
webassembly
1
webaudio
3
webgl
7
webkit
5
WebM
1
webmaster
1
webp
5
webrtc
6
websockets
5
webtiming
1
writable-files
1
yerba beuna center for the arts
1
Archive
2025
Jul
Jun
May
Jan
2024
Dec
Aug
Jun
May
Apr
Mar
Feb
2023
Nov
Oct
Sep
Aug
Jun
May
Apr
Feb
2022
Dec
Sep
Aug
Jun
May
Apr
Mar
Feb
Jan
2021
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2020
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2019
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2018
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2017
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2016
Dec
Nov
Oct
Sep
Aug
Jun
May
Apr
Mar
Feb
Jan
2015
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2014
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2013
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2012
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2011
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2010
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2009
Dec
Nov
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2008
Dec
Nov
Oct
Sep
Feed
Follow @ChromiumDev
Give us feedback in our
Product Forums
.
天蝎座跟什么星座最配
黑豆有什么功效和作用
孕期吃什么长胎不长肉
什么叫更年期
金钱草什么样
hugo是什么意思
牙龈肿痛吃什么药最好
什么动物会冬眠
攀缘是什么意思
沙参长什么样子图片
梦见自己生病了是什么意思
墙头草是什么意思
什么样的小鸟
经常吃维生素c有什么好处和坏处
阴蒂痛是什么原因
假体隆胸什么材料好
眼压高是什么原因引起的
男人交生育保险有什么用
二氧化硅是什么氧化物
3月18号是什么星座
子宫后位是什么意思hcv8jop4ns8r.cn
美国为什么制裁伊朗travellingsim.com
歌字五行属什么hcv8jop1ns6r.cn
tmd什么意思hcv7jop5ns1r.cn
月支是什么意思hcv9jop1ns0r.cn
黄墙绿地的作用是什么hcv9jop4ns2r.cn
蝉的鸣叫声像什么kuyehao.com
吃胡萝卜有什么好处hcv8jop8ns6r.cn
六月不搬家是什么意思0297y7.com
双花红棍什么意思hcv8jop9ns8r.cn
血常规挂什么科hcv8jop3ns6r.cn
双肾实质回声增强是什么意思hcv8jop4ns0r.cn
薄荷有什么功效hcv8jop8ns8r.cn
白细胞多是什么意思hcv8jop0ns4r.cn
左边小腹痛什么原因女hcv7jop6ns3r.cn
李子不能和什么一起吃hcv8jop4ns3r.cn
男性什么适合长期泡水喝hcv8jop0ns0r.cn
我拿什么留住你inbungee.com
浮水是什么意思hcv7jop5ns3r.cn
什么品牌的卫浴好jasonfriends.com
百度
