Skip to content

Narrow permissions requirements ("Read your browsing history") #51

@sudonatalie

Description

@sudonatalie

This extension currently comes with the following warning:

Permissions

  • Read your browsing history

It would be nice to narrow the manifest permissions so this warning is no longer necessary.


Problem

The declarative content script injection is insufficient to catch navigations within the Trello site, because it uses the History pushState() API, so with that alone, the content script would not be injected when the user navigates from a non-board page to a board page within Trello.

Current Solution (webNavigation)

To work around this, we re-inject the content script on chrome.webNavigation.onHistoryStateUpdated. This requires the webNavigation permission to be declared (causing the above warning).

If this old request was implemented, we could avoid this broad warning, but that seems unlikely.

Alternative Solution (declarativeContent)

The chrome.declarativeContent.RequestContentScript API could be a better alternative, but it has 2 problems right now:

  1. It's still experimental, and likely to change in the future, so I'm not inclined to depend on it yet.
  2. It doesn't yet support injecting CSS (although we could work around that by doing it manually via the JS content script).

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions