Live data from Hacker News

Google Killing Chrome Extensions with 1 Week Publishing Delays

getpolarized.io

41–46 of 46 posts

Re: Google Killing Chrome Extensions with 1 Week Publishing Delays

#41
post #36

There are a lot pronouns used in this article referring to a "permission". What permission are they referring to? I pushed out an update to a Chrome extension a few days ago and it was live in a matter of hours. Is there some specific permission that triggers this review?

From a comment three days ago: > Right now I'm asking for "all permissions" for our extension as I need to inject a header in an HTTP response for CORS. So we're under auditing for every update.

Re: Google Killing Chrome Extensions with 1 Week Publishing Delays

#42
post #36

There are a lot pronouns used in this article referring to a "permission". What permission are they referring to? I pushed out an update to a Chrome extension a few days ago and it was live in a matter of hours. Is there some specific permission that triggers this review?

From a comment three days ago: > Right now I'm asking for "all permissions" for our extension as I need to inject a header in an HTTP response for CORS. So we're under auditing for every update.

[deleted]

Re: Google Killing Chrome Extensions with 1 Week Publishing Delays

#43
post #36

There are a lot pronouns used in this article referring to a "permission". What permission are they referring to? I pushed out an update to a Chrome extension a few days ago and it was live in a matter of hours. Is there some specific permission that triggers this review?

They seem to be asking for:

      "permissions": [
        "activeTab",
        "fileBrowserHandler",
        "webRequest",
        "webRequestBlocking",
        "webNavigation",
        "",
        "storage",
        "tabs",
        "tabCapture",
        "cookies",
        "http://localhost:8500/rest/v1/capture/trigger",
        "contextMenus",
        "unlimitedStorage",
        "declarativeContent",
        "idle",
        "storage"
    ],

I think is the scary one that lets it read and change all data on any website you visit.

Re: Google Killing Chrome Extensions with 1 Week Publishing Delays

#44

Earlier quoted context omitted.

Improve your QA process and you will not be waylaid by something as simple as a typo.

Hopefully there'd be an option to roll back to some previously approved/released version. So your users may have to wait longer for the exciting new functionality, but at least they won't be screwed.

Exactly. There should be a proper workflow with reversion if needed.

Re: Google Killing Chrome Extensions with 1 Week Publishing Delays

#45
post #43
post #36

There are a lot pronouns used in this article referring to a "permission". What permission are they referring to? I pushed out an update to a Chrome extension a few days ago and it was live in a matter of hours. Is there some specific permission that triggers this review?

They seem to be asking for: "permissions": [ "activeTab", "fileBrowserHandler", "webRequest", "webRequestBlocking", "webNavigation", " ", "storage", "tabs", "tabCapture", "cookies", "http://localhost:8500/rest/v1/capture/trigger", "contextMenus", "unlimitedStorage", "declarativeContent", "idle", "storage" ], I think is the scary one that lets it read and change all data on any website you visit.

Yeah, that set of permissions is basically handing over all control of the browser. It also isn't just the content of the websites you visit. It gives the extension the ability to read cookies and local storage plus read, modify, and block all web requests. I think it is completely reasonable for Google to give extra scrutiny to an extension requesting these permissions.

Re: Google Killing Chrome Extensions with 1 Week Publishing Delays

#46
post #2

I really hope this gets changed as this currently makes fixing small changes a massive, and wanting to release a feature at the same time on a website and extension means the chrome version must be done a week in advance. This is really killing productivity

This delay seems to be only when requesting specific permissions such the “all url” one. So most extensions shouldn’t need to wait that long.
Post reply on HN