OLD | NEW |
1 <h1>Formats: Manifest Files</h1> | 1 <h1>Formats: Manifest Files</h1> |
2 | 2 |
3 | 3 |
4 <p> | 4 <p> |
5 Every extension, installable web app, and theme has a | 5 Every extension, installable web app, and theme has a |
6 <a href="http://www.json.org">JSON</a>-formatted manifest file, | 6 <a href="http://www.json.org">JSON</a>-formatted manifest file, |
7 named <code>manifest.json</code>, | 7 named <code>manifest.json</code>, |
8 that provides important information. | 8 that provides important information. |
9 </p> | 9 </p> |
10 | 10 |
(...skipping 44 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
55 "<a href="#permissions">permissions</a>": [...], | 55 "<a href="#permissions">permissions</a>": [...], |
56 "<a href="npapi.html">plugins</a>": [...], | 56 "<a href="npapi.html">plugins</a>": [...], |
57 "<a href="#requirements">requirements</a>": {...}, | 57 "<a href="#requirements">requirements</a>": {...}, |
58 "<a href="autoupdate.html">update_url</a>": "http://<em>path/to/updateInfo</em
>.xml", | 58 "<a href="autoupdate.html">update_url</a>": "http://<em>path/to/updateInfo</em
>.xml", |
59 "<a href="#web_accessible_resources">web_accessible_resources</a>": [...], | 59 "<a href="#web_accessible_resources">web_accessible_resources</a>": [...], |
60 "<a href="#sandbox">sandbox</a>": [...] | 60 "<a href="#sandbox">sandbox</a>": [...] |
61 } | 61 } |
62 </pre> | 62 </pre> |
63 | 63 |
64 | 64 |
65 <h2>Field details</h2> | 65 <h2 id="field_details">Field details</h2> |
66 | 66 |
67 <p> | 67 <p> |
68 This section covers fields that aren't described in another page. | 68 This section covers fields that aren't described in another page. |
69 For a complete list of fields, | 69 For a complete list of fields, |
70 with links to where they're described in detail, | 70 with links to where they're described in detail, |
71 see the <a href="#overview">Field summary</a>. | 71 see the <a href="#overview">Field summary</a>. |
72 </p> | 72 </p> |
73 | 73 |
74 | 74 |
75 <h3 id="app">app</h3> | 75 <h3 id="app">app</h3> |
(...skipping 168 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
244 </p> | 244 </p> |
245 | 245 |
246 <p> | 246 <p> |
247 The "disposition" is either "inline" or "window". Intents with "window" disposit
ion will open a new tab when invoked. Intents with "inline" disposition will be
displayed inside the intent picker when invoked. | 247 The "disposition" is either "inline" or "window". Intents with "window" disposit
ion will open a new tab when invoked. Intents with "inline" disposition will be
displayed inside the intent picker when invoked. |
248 </p> | 248 </p> |
249 | 249 |
250 <p> | 250 <p> |
251 For more information on intents, refer to the <a href="http://dvcs.w3.org/hg/web
-intents/raw-file/tip/spec/Overview.html">Web Intents specification</a> and <a h
ref="http://www.webintents.org">webintents.org</a>. | 251 For more information on intents, refer to the <a href="http://dvcs.w3.org/hg/web
-intents/raw-file/tip/spec/Overview.html">Web Intents specification</a> and <a h
ref="http://www.webintents.org">webintents.org</a>. |
252 </p> | 252 </p> |
253 | 253 |
254 <h4>Handling content types via intents</h4> | 254 <h4 id="content_types">Handling content types via intents</h4> |
255 | 255 |
256 <p> | 256 <p> |
257 Web Intents can be registered as content type viewers. To do that, the action ve
rb must be <a href="http://webintents.org/view">"http://webintents.org/view"</a>
, and the content type must be a white-listed MIME type. | 257 Web Intents can be registered as content type viewers. To do that, the action ve
rb must be <a href="http://webintents.org/view">"http://webintents.org/view"</a>
, and the content type must be a white-listed MIME type. |
258 </p> | 258 </p> |
259 | 259 |
260 <table> | 260 <table> |
261 <tr> | 261 <tr> |
262 <th>Whitelisted MIME types</th> | 262 <th>Whitelisted MIME types</th> |
263 </tr> | 263 </tr> |
264 <tr><td>application/rss+xml</td></tr> | 264 <tr><td>application/rss+xml</td></tr> |
(...skipping 541 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
806 Prior to manifest version 2 all resources within an extension could be accessed | 806 Prior to manifest version 2 all resources within an extension could be accessed |
807 from any page on the web. This allowed a malicious website to | 807 from any page on the web. This allowed a malicious website to |
808 <a href="http://en.wikipedia.org/wiki/Device_fingerprint">fingerprint</a> the | 808 <a href="http://en.wikipedia.org/wiki/Device_fingerprint">fingerprint</a> the |
809 extensions that a user has installed or exploit vulnerabilities (for example | 809 extensions that a user has installed or exploit vulnerabilities (for example |
810 <a href="http://en.wikipedia.org/wiki/Cross-site_scripting">XSS bugs</a>)within | 810 <a href="http://en.wikipedia.org/wiki/Cross-site_scripting">XSS bugs</a>)within |
811 installed extensions. Limiting availability to only resources which are | 811 installed extensions. Limiting availability to only resources which are |
812 explicitly intended to be web accessible serves to both minimize the available | 812 explicitly intended to be web accessible serves to both minimize the available |
813 attack surface and protect the privacy of users. | 813 attack surface and protect the privacy of users. |
814 </p> | 814 </p> |
815 | 815 |
816 <h4>Default Availability</h4> | 816 <h4 id="availability">Default Availability</h4> |
817 | 817 |
818 <p> | 818 <p> |
819 Resources inside of packages using <a href="#manifest_version"><code>manifest_ve
rsion</code></a> | 819 Resources inside of packages using <a href="#manifest_version"><code>manifest_ve
rsion</code></a> |
820 2 or above are <strong>blocked by default</strong>, and must be whitelisted | 820 2 or above are <strong>blocked by default</strong>, and must be whitelisted |
821 for use via this property. | 821 for use via this property. |
822 </p> | 822 </p> |
823 | 823 |
824 <p> | 824 <p> |
825 Resources inside of packages using <code>manifest_version</code> 1 are available | 825 Resources inside of packages using <code>manifest_version</code> 1 are available |
826 by default, but <em>if</em> you do set this property, then it will be treated as | 826 by default, but <em>if</em> you do set this property, then it will be treated as |
(...skipping 61 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
888 goes into more detail about implementing a sandboxing workflow that enables use | 888 goes into more detail about implementing a sandboxing workflow that enables use |
889 of libraries that would otherwise have issues executing under extension's | 889 of libraries that would otherwise have issues executing under extension's |
890 <a href="../extensions/contentSecurityPolicy.html">default Content Security | 890 <a href="../extensions/contentSecurityPolicy.html">default Content Security |
891 Policy</a>. | 891 Policy</a>. |
892 </p> | 892 </p> |
893 | 893 |
894 <p> | 894 <p> |
895 Sandboxed page may only be specified when using | 895 Sandboxed page may only be specified when using |
896 <a href="#manifest_version"><code>manifest_version</code></a> 2 or above. | 896 <a href="#manifest_version"><code>manifest_version</code></a> 2 or above. |
897 </p> | 897 </p> |
OLD | NEW |