势不可挡是什么意思
|
宫外孕是什么
|
荒唐是什么意思
|
冷落是什么意思
|
氯化钠是什么盐
|
世界上最大的海洋是什么
|
医的笔顺是什么
|
受凉拉肚子吃什么药
|
中老年人喝什么奶粉好
|
促甲状腺激素高是什么意思
|
lol锤石什么时候出的
|
阴道炎是什么引起的
|
什么的鞋子
|
外阴白斑用什么药最好
|
肺结核吃什么食物好
|
福祉是什么意思
|
你为什么爱我
|
属牛是什么命
|
原本是什么意思
|
原则上是什么意思
|
眼睛胀痛是什么原因
|
后背凉是什么原因
|
体检挂什么科
|
鸡汤是什么意思
|
什么是转氨酶
|
无限未来为什么不写了
|
知柏地黄丸治什么病
|
什么茶
|
促甲状腺激素低是什么原因
|
梦遗是什么
|
硬水是什么
|
箬叶和粽叶有什么区别
|
梅毒病有什么症状
|
脖子上长小肉粒是什么原因
|
成也萧何败也萧何什么意思
|
胃炎能吃什么
|
alin是什么意思
|
抹茶色是什么颜色
|
水痘是什么
|
做梦坐飞机是什么意思
|
咳嗽有白痰一直不好是什么原因
|
干姜和生姜有什么区别
|
什么的脸庞
|
ira是什么品牌
|
前胸疼是什么原因
|
肴肉是什么肉
|
重度抑郁症吃什么药
|
什么是ct检查
|
bp是什么意思医学上面
|
一号来的月经排卵期是什么时候
|
少校什么级别
|
oa是什么
|
奉天为什么改名沈阳
|
艾滋病初期皮疹是什么样的
|
松垮是什么意思
|
蓝颜是什么意思
|
男性睾丸一边大一边小是什么原因
|
低置胎盘有什么危险
|
三月20号是什么星座
|
12月什么星座
|
黄姜长什么样图片
|
什么是褪黑素
|
零八年属什么
|
什么生肖不能养龟
|
子宫内膜14mm说明什么
|
手足口病喝什么汤
|
腰肌劳损是什么原因造成的
|
乌鸡白凤丸适合什么人吃
|
发烧能吃什么
|
宫颈机能不全是什么意思
|
1981年属什么
|
阴虱是什么样子图片
|
用什么能把牙齿洗白
|
荨麻疹抹什么药膏
|
斑鸠吃什么
|
卵胎生是什么意思
|
端午节吃什么菜呢
|
宠物螃蟹吃什么
|
3月14日是什么星座
|
宝宝爱出汗是什么原因
|
心包隐窝是什么意思
|
斯密达什么意思
|
同工同酬是什么意思
|
手链断了是什么预兆
|
护士最高职称是什么
|
眼睛为什么会长麦粒肿
|
中暑是什么症状
|
吃过期的药有什么后果
|
辣椒属于什么科植物
|
小孩吃榴莲有什么好处
|
打嗝什么原因
|
12年义务教育什么时候实行
|
慢性浅表性胃炎吃什么药好得快
|
身心交瘁什么意思
|
护理是干什么的
|
为什么不能天天喝豆浆
|
什么的豆角
|
端午节都吃什么菜好
|
壁虎吃什么食物
|
红皮鸡蛋和白皮鸡蛋有什么区别
|
为什么怀孕这么难
|
例假颜色发黑是什么原因
|
脾胃虚弱吃什么中成药
|
射手座是什么象星座
|
脑炎的后遗症是什么
|
一九七八年属什么生肖
|
flair呈高信号是什么意思
|
狗尾巴草有什么功效
|
卧轨什么意思
|
送同学什么毕业礼物好
|
尾骨疼是什么原因
|
没出息什么意思
|
国家一级演员是什么级别
|
什么蓝牙耳机好
|
paul是什么意思
|
凤梨不能和什么一起吃
|
双脚发热是什么原因
|
蚊虫叮咬红肿用什么药快速消肿
|
冲突是什么意思
|
少将相当于地方什么级别
|
离职原因写什么
|
脂肪最终消化成什么
|
亚克力是什么材质
|
用盐水漱口有什么好处
|
74岁属什么
|
双子座的幸运花是什么
|
空亡是什么意思
|
水瓜壳煲水有什么功效
|
肉碱是什么
|
免疫性疾病是什么意思
|
欧根纱是什么面料
|
空调自动关机是什么原因
|
0mg是什么意思
|
职业资格证书有什么用
|
脚上起水泡是什么原因
|
眼睛干涩疲劳用什么眼药水
|
考试前吃什么
|
检查梅毒挂什么科
|
抗氧化是什么意思
|
股票放量是什么意思
|
殇读什么
|
左氧氟沙星的功效是什么
|
什么的哭
|
橘猫是什么品种
|
马吃什么食物
|
什么人不适合喝咖啡
|
硫化氢什么味道
|
血红蛋白低吃什么可以补起来
|
笨拙是什么意思
|
憋尿憋不住是什么原因
|
女性下面长什么样
|
第一颗原子弹叫什么
|
背疽是什么病
|
武林外传的客栈叫什么
|
819是什么意思
|
糖尿病吃什么水果比较好
|
牙冠是什么
|
跃然纸什么
|
河东狮吼什么意思
|
十九岁属什么
|
icicle是什么牌子
|
左卵巢囊性结构是什么意思
|
肝fnh是什么病
|
宫颈息肉是什么原因引起的
|
流产期间吃什么好
|
什么人不能吃苦瓜
|
2018年属什么
|
皮肤软组织感染用什么消炎药
|
筋膜炎吃什么药最有效
|
黑无常叫什么
|
南辕北辙是什么意思
|
冠脉ct能检查出什么
|
生眼屎是什么原因引起的
|
嘴巴发麻是什么原因
|
录取通知书是什么生肖
|
滚床单什么意思
|
一个草字头一个见念什么
|
老人吃饭老是噎着是什么原因
|
蛇缠腰用什么药
|
vsop是什么酒
|
1946年中国发生了什么
|
科技皮是什么皮
|
变蛋吃多了有什么危害
|
雄激素过高是什么意思
|
腰酸是什么原因引起的
|
什么吃辣椒抓耳挠腮
|
爬高上低是什么意思
|
拉肚子出血是什么原因
|
值太岁是什么意思
|
芥末是用什么做的
|
消防大队长是什么级别
|
旺是什么意思
|
脾胃是什么
|
小别胜新婚是什么意思
|
就藩什么意思
|
血液是由什么组成的
|
豌豆有什么营养价值
|
水乳是什么
|
洋葱和什么不能一起吃
|
粉头是什么意思
|
反绒皮是什么材质
|
肛瘘不治疗有什么后果
|
心气虚吃什么中成药
|
什么如泰山
|
蛋白尿是什么颜色
|
嘴唇是紫色的是什么原因
|
翡翠是什么意思
|
胸闷气短是什么原因引起的
|
鸡吃什么
|
牛大力有什么功效
|
逼宫什么意思
|
bf是什么意思
|
四级军士长是什么级别
|
归元寺求什么最灵验
|
头发黄是什么原因
|
蟾蜍属于什么动物
|
silence是什么意思
|
来来来喝完这杯还有三杯是什么歌
|
克加寸念什么
|
肉身成圣是什么意思
|
什么是黑色素肿瘤
|
滑精是什么症状
|
偏科是什么意思
|
缺钠是什么原因造成的
|
含是什么意思
|
五月10号是什么星座
|
请示是什么意思
|
肺与大肠相表里是什么意思
|
低密度脂蛋白是什么意思
|
京东pop是什么意思
|
驴友是什么意思
|
三剑客是什么意思
|
阑尾炎在什么位置
|
协会是什么意思
|
紫河车是什么东西
|
核磁共振是什么
|
胆脂瘤是什么病
|
sdeer是什么牌子
|
女人湿气太重喝什么茶
|
肝脏在人体什么位置
|
芒硝是什么
|
鱼油不适合什么人吃
|
格局小是什么意思
|
药引是什么意思
|
跳蚤的天敌是什么
|
深圳有什么好吃的
|
溃疡是什么意思
|
双肾泥沙样结石是什么意思
|
戾是什么意思
|
同型半胱氨酸高吃什么
|
枸杞泡水喝有什么作用和功效
|
猫癣用什么药
|
一见如什么
|
玫瑰金是什么颜色
|
晚上夜尿多是什么原因
|
心电轴右偏是什么意思
|
鸡黍是什么意思
|
牙龈为什么会萎缩
|
仙人是什么生肖
|
蝙蝠是什么类动物
|
天秤座和什么座最配
|
kumpoo是什么牌子
|
宫颈欠光滑是什么意思
|
上火喝什么
|
百度
Chromium Blog
News and developments from the open source browser project
Web Request and Declarative Net Request: Explaining the impact on Extensions in Manifest V3
Wednesday, June 12, 2019
The Story So Far
As part of an effort to increase user security and privacy, Chrome is planning a number of changes to the extensions platform. We
announced some of these changes
last October, and have provided
additional context
on them today
.
These changes to the platform are being implemented as part of Manifest V3 – the next version of the Chrome Extensions platform.
One of these changes is to move away from the blocking version of the
Web Request API
towards a new API, called
Declarative Net Request
. There’s been a lot of confusion and misconception around both the motivations and implications of this change, including speculation that these changes were designed to prevent or weaken ad blockers. This is absolutely not the goal. In fact, this change is meant to give developers a way to create safer and more performant ad blockers.
In order to improve the security and privacy guarantees of the extensions platform, we are rethinking some of the extension platform's core APIs. That's why we're planning to replace the blocking Web Request API with the Declarative Net Request API.
How Web Request Works
With Web Request, Chrome sends all the data in a network request to the listening extension - including any sensitive data contained in that request like personal photos or emails. The extension has a chance to evaluate the request, and then tells Chrome what to do with the request: allow it, block it, or send it with some modifications. As a result, extensions that leverage the Web Request API typically have access to read and manipulate everything a user does on the web.
While this API is used by good actors to implement powerful features like content blockers, it can also be - and has been - abused. Because all of the request data is exposed to the extension, it makes it very easy for a malicious developer to abuse that access to a user’s credentials, accounts, or personal information. Since January 2018, 42% of malicious extensions use the Web Request API.
In addition to these safety concerns, there are also significant performance costs. In most cases, these costs are
not
from the evaluation of the extension script processing events, but rather from everything else coordinating the script. That overall performance impact can be very large, even for an extension written as performantly as possible where the JavaScript execution time is negligible.
As it’s designed today, the blocking version of the Web Request API requires a persistent, long-running process, and is fundamentally incompatible with “lazy” processes - processes that can be set up or torn down as-needed, conserving valuable system resources. There are also significant costs associated with the serialization of the request data, the inter-process communication needed to send that data to the extensions, and the processing of extension responses.
Enter Declarative Net Request
The Declarative Net Request API works differently than the Web Request API. Instead of Chrome sending all the information about a request to the listening extensions at the time of the request, extensions register rules that tell Chrome what to do if certain types of requests are seen.
This approach has advantages for both user security and privacy, as well as performance. With a declarative approach, Chrome does not need to expose any sensitive data to the extension. The browser can perform the action requested by the extension without sending it all the data associated with the network request, because the extension already specified the conditions under which different actions are taken. This enables the extension to perform content blocking without needing access to all of a user’s personal information.
This has significant performance implications. Most importantly, a persistent, long-running process is no longer necessary because rules are registered before requests are made rather than needing to process them at runtime. This also cuts down on the cost of serializing all the request data and shuttling the inter-process messages to the listening extensions.
These performance improvements will make extensions significantly more viable on resource-constrained platforms.
Why Not Both?
In addition to the performance concerns raised above, the Chrome team strongly believes that users should not have to expose their emails, photos, social media, or any other sensitive data to an extension if the extension doesn’t actually need that access to perform its function. And historically, when extension developers are given the choice between capability and security, the vast majority of developers choose capability. We've seen this repeatedly on the extensions platform with event pages, optional permissions, and activeTab.
Enterprise
Enterprises, schools, and businesses often require different network and software controls to comply with corporate policies. Additionally, these organizations typically have administrators whose role it is to understand and set up their environments.
Chrome provides enterprise controls through its
administrator policies
. The blocking version of the Web Request API remains available for managed extensions because of the deep integrations that enterprises may have between their software suites and Chrome. System administrators can continue to manage Chrome in enterprise environments for free using OS-provided mechanisms to deploy Chrome
policies
.
Moving Forward
Declarative Net Request, and the whole of Manifest V3, is still very much in design and development. We are continuing to iterate on it, responding to community feedback and working with developers to help support different use cases.
Since the original announcement of the Declarative Net Request API, we have added significant functionality to the API as a result of these discussions. The Declarative Net Request API now allows for the registration and removal of dynamic rules - specified at runtime rather than statically in the manifest. We’ve also added the capability to remove common tracking headers, such as Referer, Cookie, and Set-Cookie.
We are actively exploring other ways to expand this API, including adding methods to get feedback about matched rules, and support for richer redirects leveraging URL manipulation and regular expressions. Additionally, we are currently planning to change the rule limit from maximum of 30k rules per extension to a global maximum of 150k rules.
We will continue working with the developer community moving forward. We understand that adopting Manifest V3 will require developers to update their extensions and we will continue to support them through this transition.
Posted by
Simeon Vincent, Developer Advocate for Chrome Extensions
Labels
$200K
1
10th birthday
4
abusive ads
1
abusive notifications
2
accessibility
3
ad blockers
1
ad blocking
2
advanced capabilities
1
android
2
anti abuse
1
anti-deception
1
background periodic sync
1
badging
1
benchmarks
1
beta
83
better ads standards
1
billing
1
birthday
4
blink
2
browser
2
browser interoperability
1
bundles
1
capabilities
6
capable web
1
cds
1
cds18
2
cds2018
1
chrome
35
chrome 81
1
chrome 83
2
chrome 84
2
chrome ads
1
chrome apps
5
Chrome dev
1
chrome dev summit
1
chrome dev summit 2018
1
chrome dev summit 2019
1
chrome developer
1
Chrome Developer Center
1
chrome developer summit
1
chrome devtools
1
Chrome extension
1
chrome extensions
3
Chrome Frame
1
Chrome lite
1
Chrome on Android
2
chrome on ios
1
Chrome on Mac
1
Chrome OS
1
chrome privacy
4
chrome releases
1
chrome security
10
chrome web store
32
chromedevtools
1
chromeframe
3
chromeos
4
chromeos.dev
1
chromium
9
cloud print
1
coalition
1
coalition for better ads
1
contact picker
1
content indexing
1
cookies
1
core web vitals
2
csrf
1
css
1
cumulative layout shift
1
custom tabs
1
dart
8
dashboard
1
Data Saver
3
Data saver desktop extension
1
day 2
1
deceptive installation
1
declarative net request api
1
design
2
developer dashboard
1
Developer Program Policy
2
developer website
1
devtools
13
digital event
1
discoverability
1
DNS-over-HTTPS
4
DoH
4
emoji
1
emscriptem
1
enterprise
1
extensions
27
Fast badging
1
faster web
1
features
1
feedback
2
field data
1
first input delay
1
Follow
1
fonts
1
form controls
1
frameworks
1
fugu
2
fund
1
funding
1
gdd
1
google earth
1
google event
1
google io 2019
1
google web developer
1
googlechrome
12
harmful ads
1
html5
11
HTTP/3
1
HTTPS
4
iframes
1
images
1
incognito
1
insecure forms
1
intent to explain
1
ios
1
ios Chrome
1
issue tracker
3
jank
1
javascript
5
lab data
1
labelling
1
largest contentful paint
1
launch
1
lazy-loading
1
lighthouse
2
linux
2
Lite Mode
2
Lite pages
1
loading interventions
1
loading optimizations
1
lock icon
1
long-tail
1
mac
1
manifest v3
2
metrics
2
microsoft edge
1
mixed forms
1
mobile
2
na
1
native client
8
native file system
1
New Features
5
notifications
1
octane
1
open web
4
origin trials
2
pagespeed insights
1
pagespeedinsights
1
passwords
1
payment handler
1
payment request
1
payments
2
performance
20
performance tools
1
permission UI
1
permissions
1
play store
1
portals
3
prefetching
1
privacy
2
privacy sandbox
4
private prefetch proxy
1
profile guided optimization
1
progressive web apps
2
Project Strobe
1
protection
1
pwa
1
QUIC
1
quieter permissions
1
releases
3
removals
1
rlz
1
root program
1
safe browsing
2
Secure DNS
2
security
36
site isolation
1
slow loading
1
sms receiver
1
spam policy
1
spdy
2
spectre
1
speed
4
ssl
2
store listing
1
strobe
2
subscription pages
1
suspicious site reporter extension
1
TCP
1
the fast and the curious
23
TLS
1
tools
1
tracing
1
transparency
1
trusted web activities
1
twa
2
user agent string
1
user data policy
1
v8
6
video
2
wasm
1
web
1
web apps
1
web assembly
2
web developers
1
web intents
1
web packaging
1
web payments
1
web platform
1
web request api
1
web vitals
1
web.dev
1
web.dev live
1
webapi
1
webassembly
1
webaudio
3
webgl
7
webkit
5
WebM
1
webmaster
1
webp
5
webrtc
6
websockets
5
webtiming
1
writable-files
1
yerba beuna center for the arts
1
Archive
2025
Jul
Jun
May
Jan
2024
Dec
Aug
Jun
May
Apr
Mar
Feb
2023
Nov
Oct
Sep
Aug
Jun
May
Apr
Feb
2022
Dec
Sep
Aug
Jun
May
Apr
Mar
Feb
Jan
2021
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2020
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2019
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2018
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2017
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2016
Dec
Nov
Oct
Sep
Aug
Jun
May
Apr
Mar
Feb
Jan
2015
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2014
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2013
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2012
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2011
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2010
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2009
Dec
Nov
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2008
Dec
Nov
Oct
Sep
Feed
Follow @ChromiumDev
Give us feedback in our
Product Forums
.
男人交公粮什么意思
s代表什么
忙碌的动物是什么生肖
破伤风针有什么作用
尿蛋白1十是什么意思
超声科检查什么
新生儿囟门什么时候闭合
感冒吃什么消炎药效果好
六月初三是什么日子
早泄什么意思
结节性硬化症是什么病
哈尔滨市长什么级别
指甲长的快是什么原因
孕激素六项检查什么时候做
oversize是什么意思
NT是什么钱
hpv病毒通过什么途径传播
北京市市长是什么级别
幻听一般会听到什么
尿道炎是什么引起的
什么人不能喝丹参hcv9jop1ns8r.cn
用什么可以解开所有的谜hcv8jop6ns7r.cn
榴莲皮可以做什么xscnpatent.com
记忆力减退是什么原因造成的hcv9jop7ns3r.cn
自渎什么意思hcv8jop8ns3r.cn
肝右叶低密度灶是什么意思hcv8jop8ns7r.cn
汕是什么意思hcv9jop5ns4r.cn
beaf什么意思hcv9jop4ns1r.cn
手上的纹路代表什么hcv9jop3ns0r.cn
什么是禅wzqsfys.com
大米有什么营养0735v.com
吃完避孕药有什么反应hcv8jop0ns6r.cn
胃疼喝什么可以缓解hcv9jop6ns2r.cn
尿酸高注意什么hcv9jop3ns2r.cn
icp是什么意思hcv9jop2ns7r.cn
猎德村为什么那么有钱hcv8jop2ns4r.cn
孕妇鼻子出血是什么原因hcv9jop3ns4r.cn
辰五行属什么hcv8jop8ns9r.cn
吃什么能消除子宫肌瘤hcv9jop4ns8r.cn
心有余而力不足什么意思hlguo.com
百度
