肥胖去医院挂什么科
|
木薯淀粉可以做什么
|
滴滴什么意思
|
人体最大的消化腺是什么
|
便宜的反义词是什么
|
最贵的烟是什么牌子
|
你想成为什么样的人
|
Fish什么意思
|
什么都不放的冬瓜清汤
|
颈椎曲度变直有什么症状
|
唯我独尊是什么意思
|
为什么不能抖腿
|
做完雾化为什么要漱口
|
梦见蛇是什么预兆
|
g18k金是什么意思
|
血浓稠是什么原因引起的
|
rpl是什么意思
|
infp是什么意思
|
拉架棉是什么面料
|
背部疼痛是什么原因引起的
|
看脱发应该挂什么科
|
嗓子嘶哑吃什么药
|
狐狸的尾巴有什么作用
|
副作用是什么意思
|
打破伤风不能吃什么
|
血压过低有什么危害
|
胎儿右侧脉络丛囊肿是什么意思
|
蛇鼠一窝是什么生肖
|
月经每个月都推迟是什么原因
|
幼儿贫血吃什么补血最快
|
五十知天命什么意思
|
查脂肪肝做什么检查
|
回眸一笑百媚生什么意思
|
pro是什么意思
|
儿童手足口病吃什么药
|
玉树临风是什么意思
|
做什么动作可以长高
|
内分泌失调是什么原因引起的
|
没落是什么意思
|
弟是什么结构的字
|
为什么会被限制高消费
|
男性湿热吃什么药最好
|
二月十号是什么星座
|
穴与什么有关
|
北京西单附近有什么好玩的
|
齿痕舌是什么原因
|
双签是什么意思
|
糖尿病人可以吃什么零食
|
红日是什么意思
|
心率不齐是什么原因
|
肝胆湿热喝什么茶
|
琅琊榜是什么意思
|
降压药什么时候吃
|
翡翠什么样的好
|
九个月宝宝吃什么辅食
|
perry是什么意思
|
石斛是什么东西
|
宗人府是干什么的
|
抗核小体抗体阳性说明什么
|
舌头尖麻木是什么原因
|
豆粕是什么东西
|
咖啡渣子有什么用途
|
程咬金是什么意思
|
杨新鸣包贝尔什么关系
|
木隶念什么
|
核磁和ct有什么区别
|
早餐吃什么英语怎么说
|
舌尖长溃疡是什么原因
|
偷鸡不成蚀把米是什么意思
|
七月份是什么季节
|
乌豆和黑豆有什么区别
|
心心相什么
|
迈巴赫是什么车
|
脾气暴躁易怒是什么病
|
肾炎的饮食应注意什么
|
什么油适合炒菜
|
多吃醋有什么好处和坏处
|
四肢无力吃什么药
|
牙疼什么原因
|
梦到牙齿掉了是什么意思
|
睡眠不好挂什么科
|
补脑吃什么食物
|
肚子胀吃什么
|
什么是情感障碍
|
打歌是什么意思
|
蛋白尿是什么原因引起的
|
无利起早是什么生肖
|
头晕目眩吃什么药
|
义务兵是什么意思
|
蜘蛛属于什么类动物
|
驱动精灵是干什么用的
|
食欲不振吃什么药
|
舰长是什么级别
|
裂帛是什么意思
|
pashmina是什么面料
|
自卑什么意思
|
状元是什么意思
|
经常做春梦是什么原因
|
封建思想是什么意思
|
体检吃早餐有什么影响
|
2h是什么意思
|
铅是什么
|
睡觉磨牙什么原因
|
阴盛格阳是什么意思
|
为什么叫关东军
|
粘米粉是什么米做的
|
月经准时来说明什么
|
豆沙馅可以做什么美食
|
一片狼藉是什么意思
|
哺乳期感冒了能吃什么药
|
手镯断了有什么预兆
|
荤段子是什么意思
|
骨折吃什么好的快
|
航母舰长是什么级别
|
这个人就是娘是什么歌
|
见红是什么样的
|
rich什么意思
|
三伏贴能治什么病
|
大便硬是什么原因
|
头痛吃什么
|
钢铁侠叫什么名字
|
桀是什么意思
|
转氨酶高吃什么药效果好
|
溦是什么意思
|
女生私密部位长什么样
|
梦到自己怀孕是什么意思
|
凭什么姐
|
肝外胆管扩张什么意思
|
隐翅虫皮炎用什么药
|
菊粉是什么
|
大姨妈是什么
|
蛔虫和蛲虫有什么区别
|
月是什么结构
|
五险一金指什么
|
烟花三月下扬州什么意思
|
赤砂糖是什么糖
|
八月出生的是什么星座
|
心衰为什么会引起水肿
|
众望所归是什么意思
|
别出心裁是什么生肖
|
内瘘是什么意思
|
小资情调是什么意思
|
宫外孕什么意思
|
下丘脑分泌什么激素
|
甲亢是一种什么病严重吗
|
凤凰代表什么生肖
|
乳头痒是怎么回事是什么原因
|
散瞳是什么意思
|
脾虚便秘吃什么中成药
|
肺有小结节要注意什么
|
迁坟需要准备什么东西
|
肩膀疼去医院挂什么科
|
晚上兼职可以做什么
|
来龙去脉指什么生肖
|
红花和藏红花有什么区别
|
黄钻有什么用
|
盐酸多西环素片治什么病
|
钥匙代表什么生肖
|
甲状腺功能亢进吃什么药
|
山东特产是什么
|
低血钾是什么原因引起的
|
低血压去药店买什么药
|
狗毛对人体有什么危害
|
婴儿增强免疫力吃什么
|
环切是什么意思
|
hsv是什么病毒
|
固本培元什么意思
|
甲状腺功能减退是什么意思
|
泡芙是什么意思
|
梦特娇属于什么档次
|
用什么消肿最快最有效方法
|
黄金属于五行属什么
|
十二月份的是什么星座
|
孙武和孙膑是什么关系
|
颈椎挂什么科
|
一什么泪珠
|
面部填充用什么填充效果好
|
新生儿痤疮用什么药膏
|
cd什么意思
|
痛风什么引起的原因有哪些
|
老年人生日送什么礼物
|
眼睛有血丝是什么原因
|
搞基是什么意思
|
缺少雌激素吃什么可以补充
|
拔罐出水泡是什么原因
|
血糖高的人吃什么主食
|
发痧吃什么药可以断根
|
蜜蜡什么样的成色最好
|
快递客服主要做什么
|
格林巴利综合症是什么
|
汗蒸是什么意思
|
括约肌是什么
|
喉咙有痰是什么原因
|
直肠壁增厚一般是什么情况
|
胃息肉是什么症状
|
十月一日是什么节
|
胃出血有什么症状
|
舌炎是什么症状
|
咳嗽肺疼是什么原因
|
证悟是什么意思
|
哺乳期头疼可以吃什么药
|
小孩子为什么会得抽动症
|
道德绑架是什么意思
|
细胞质由什么组成
|
杂交金毛犬长什么样子
|
肠镜什么情况下取活检
|
阴道炎不能吃什么
|
自我感动是什么意思
|
木字旁的有什么字
|
金蝉花是什么
|
郭五行属什么
|
不劳而获是什么生肖
|
什么叫丹毒
|
杀青了是什么意思
|
boy是什么品牌
|
sad什么意思
|
处女座后面是什么星座
|
鹦鹉可以吃什么
|
exo的e为什么不发音
|
为什么天上会下雨
|
慢性结肠炎吃什么药
|
什么是潮汐车道
|
男龙和什么生肖最配
|
扁桃体切除有什么坏处
|
什么路人不能走
|
什么的童话
|
33是什么意思
|
方可以加什么偏旁
|
立克次体病是什么意思
|
歹人是什么意思
|
花旦是什么意思
|
吃黄瓜对身体有什么好处
|
spyder是什么品牌
|
半夜饿是什么原因
|
腹黑男是什么意思
|
什么是取保候审
|
暗网里面有什么
|
虞是什么意思
|
胆囊结石吃什么食物好
|
子宫为什么长肌瘤
|
ssr是什么意思
|
恍恍惚惚什么意思
|
一个三点水一个除念什么
|
二月一日是什么星座
|
胚根发育成什么
|
怀孕吃什么好
|
牛大力泡酒有什么功效
|
春是什么生肖
|
心脏痛挂什么科
|
手脚冰凉吃什么药
|
什么茶叶好
|
手指甲没有月牙是什么原因
|
儿童c反应蛋白高说明什么
|
男人肾虚吃什么最补
|
大忌什么意思
|
背上长毛是什么原因引起的
|
早餐吃什么最营养
|
肺胃热盛吃什么中成药
|
梦见盖房子什么意思
|
扇贝不能和什么一起吃
|
周岁和虚岁是什么意思
|
吃什么水果补肾
|
中暑了吃什么好
|
1997年是什么命
|
百度
Chromium Blog
News and developments from the open source browser project
Web Request and Declarative Net Request: Explaining the impact on Extensions in Manifest V3
Wednesday, June 12, 2019
The Story So Far
As part of an effort to increase user security and privacy, Chrome is planning a number of changes to the extensions platform. We
announced some of these changes
last October, and have provided
additional context
on them today
.
These changes to the platform are being implemented as part of Manifest V3 – the next version of the Chrome Extensions platform.
One of these changes is to move away from the blocking version of the
Web Request API
towards a new API, called
Declarative Net Request
. There’s been a lot of confusion and misconception around both the motivations and implications of this change, including speculation that these changes were designed to prevent or weaken ad blockers. This is absolutely not the goal. In fact, this change is meant to give developers a way to create safer and more performant ad blockers.
In order to improve the security and privacy guarantees of the extensions platform, we are rethinking some of the extension platform's core APIs. That's why we're planning to replace the blocking Web Request API with the Declarative Net Request API.
How Web Request Works
With Web Request, Chrome sends all the data in a network request to the listening extension - including any sensitive data contained in that request like personal photos or emails. The extension has a chance to evaluate the request, and then tells Chrome what to do with the request: allow it, block it, or send it with some modifications. As a result, extensions that leverage the Web Request API typically have access to read and manipulate everything a user does on the web.
While this API is used by good actors to implement powerful features like content blockers, it can also be - and has been - abused. Because all of the request data is exposed to the extension, it makes it very easy for a malicious developer to abuse that access to a user’s credentials, accounts, or personal information. Since January 2018, 42% of malicious extensions use the Web Request API.
In addition to these safety concerns, there are also significant performance costs. In most cases, these costs are
not
from the evaluation of the extension script processing events, but rather from everything else coordinating the script. That overall performance impact can be very large, even for an extension written as performantly as possible where the JavaScript execution time is negligible.
As it’s designed today, the blocking version of the Web Request API requires a persistent, long-running process, and is fundamentally incompatible with “lazy” processes - processes that can be set up or torn down as-needed, conserving valuable system resources. There are also significant costs associated with the serialization of the request data, the inter-process communication needed to send that data to the extensions, and the processing of extension responses.
Enter Declarative Net Request
The Declarative Net Request API works differently than the Web Request API. Instead of Chrome sending all the information about a request to the listening extensions at the time of the request, extensions register rules that tell Chrome what to do if certain types of requests are seen.
This approach has advantages for both user security and privacy, as well as performance. With a declarative approach, Chrome does not need to expose any sensitive data to the extension. The browser can perform the action requested by the extension without sending it all the data associated with the network request, because the extension already specified the conditions under which different actions are taken. This enables the extension to perform content blocking without needing access to all of a user’s personal information.
This has significant performance implications. Most importantly, a persistent, long-running process is no longer necessary because rules are registered before requests are made rather than needing to process them at runtime. This also cuts down on the cost of serializing all the request data and shuttling the inter-process messages to the listening extensions.
These performance improvements will make extensions significantly more viable on resource-constrained platforms.
Why Not Both?
In addition to the performance concerns raised above, the Chrome team strongly believes that users should not have to expose their emails, photos, social media, or any other sensitive data to an extension if the extension doesn’t actually need that access to perform its function. And historically, when extension developers are given the choice between capability and security, the vast majority of developers choose capability. We've seen this repeatedly on the extensions platform with event pages, optional permissions, and activeTab.
Enterprise
Enterprises, schools, and businesses often require different network and software controls to comply with corporate policies. Additionally, these organizations typically have administrators whose role it is to understand and set up their environments.
Chrome provides enterprise controls through its
administrator policies
. The blocking version of the Web Request API remains available for managed extensions because of the deep integrations that enterprises may have between their software suites and Chrome. System administrators can continue to manage Chrome in enterprise environments for free using OS-provided mechanisms to deploy Chrome
policies
.
Moving Forward
Declarative Net Request, and the whole of Manifest V3, is still very much in design and development. We are continuing to iterate on it, responding to community feedback and working with developers to help support different use cases.
Since the original announcement of the Declarative Net Request API, we have added significant functionality to the API as a result of these discussions. The Declarative Net Request API now allows for the registration and removal of dynamic rules - specified at runtime rather than statically in the manifest. We’ve also added the capability to remove common tracking headers, such as Referer, Cookie, and Set-Cookie.
We are actively exploring other ways to expand this API, including adding methods to get feedback about matched rules, and support for richer redirects leveraging URL manipulation and regular expressions. Additionally, we are currently planning to change the rule limit from maximum of 30k rules per extension to a global maximum of 150k rules.
We will continue working with the developer community moving forward. We understand that adopting Manifest V3 will require developers to update their extensions and we will continue to support them through this transition.
Posted by
Simeon Vincent, Developer Advocate for Chrome Extensions
Labels
$200K
1
10th birthday
4
abusive ads
1
abusive notifications
2
accessibility
3
ad blockers
1
ad blocking
2
advanced capabilities
1
android
2
anti abuse
1
anti-deception
1
background periodic sync
1
badging
1
benchmarks
1
beta
83
better ads standards
1
billing
1
birthday
4
blink
2
browser
2
browser interoperability
1
bundles
1
capabilities
6
capable web
1
cds
1
cds18
2
cds2018
1
chrome
35
chrome 81
1
chrome 83
2
chrome 84
2
chrome ads
1
chrome apps
5
Chrome dev
1
chrome dev summit
1
chrome dev summit 2018
1
chrome dev summit 2019
1
chrome developer
1
Chrome Developer Center
1
chrome developer summit
1
chrome devtools
1
Chrome extension
1
chrome extensions
3
Chrome Frame
1
Chrome lite
1
Chrome on Android
2
chrome on ios
1
Chrome on Mac
1
Chrome OS
1
chrome privacy
4
chrome releases
1
chrome security
10
chrome web store
32
chromedevtools
1
chromeframe
3
chromeos
4
chromeos.dev
1
chromium
9
cloud print
1
coalition
1
coalition for better ads
1
contact picker
1
content indexing
1
cookies
1
core web vitals
2
csrf
1
css
1
cumulative layout shift
1
custom tabs
1
dart
8
dashboard
1
Data Saver
3
Data saver desktop extension
1
day 2
1
deceptive installation
1
declarative net request api
1
design
2
developer dashboard
1
Developer Program Policy
2
developer website
1
devtools
13
digital event
1
discoverability
1
DNS-over-HTTPS
4
DoH
4
emoji
1
emscriptem
1
enterprise
1
extensions
27
Fast badging
1
faster web
1
features
1
feedback
2
field data
1
first input delay
1
Follow
1
fonts
1
form controls
1
frameworks
1
fugu
2
fund
1
funding
1
gdd
1
google earth
1
google event
1
google io 2019
1
google web developer
1
googlechrome
12
harmful ads
1
html5
11
HTTP/3
1
HTTPS
4
iframes
1
images
1
incognito
1
insecure forms
1
intent to explain
1
ios
1
ios Chrome
1
issue tracker
3
jank
1
javascript
5
lab data
1
labelling
1
largest contentful paint
1
launch
1
lazy-loading
1
lighthouse
2
linux
2
Lite Mode
2
Lite pages
1
loading interventions
1
loading optimizations
1
lock icon
1
long-tail
1
mac
1
manifest v3
2
metrics
2
microsoft edge
1
mixed forms
1
mobile
2
na
1
native client
8
native file system
1
New Features
5
notifications
1
octane
1
open web
4
origin trials
2
pagespeed insights
1
pagespeedinsights
1
passwords
1
payment handler
1
payment request
1
payments
2
performance
20
performance tools
1
permission UI
1
permissions
1
play store
1
portals
3
prefetching
1
privacy
2
privacy sandbox
4
private prefetch proxy
1
profile guided optimization
1
progressive web apps
2
Project Strobe
1
protection
1
pwa
1
QUIC
1
quieter permissions
1
releases
3
removals
1
rlz
1
root program
1
safe browsing
2
Secure DNS
2
security
36
site isolation
1
slow loading
1
sms receiver
1
spam policy
1
spdy
2
spectre
1
speed
4
ssl
2
store listing
1
strobe
2
subscription pages
1
suspicious site reporter extension
1
TCP
1
the fast and the curious
23
TLS
1
tools
1
tracing
1
transparency
1
trusted web activities
1
twa
2
user agent string
1
user data policy
1
v8
6
video
2
wasm
1
web
1
web apps
1
web assembly
2
web developers
1
web intents
1
web packaging
1
web payments
1
web platform
1
web request api
1
web vitals
1
web.dev
1
web.dev live
1
webapi
1
webassembly
1
webaudio
3
webgl
7
webkit
5
WebM
1
webmaster
1
webp
5
webrtc
6
websockets
5
webtiming
1
writable-files
1
yerba beuna center for the arts
1
Archive
2025
Jul
Jun
May
Jan
2024
Dec
Aug
Jun
May
Apr
Mar
Feb
2023
Nov
Oct
Sep
Aug
Jun
May
Apr
Feb
2022
Dec
Sep
Aug
Jun
May
Apr
Mar
Feb
Jan
2021
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2020
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2019
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2018
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2017
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2016
Dec
Nov
Oct
Sep
Aug
Jun
May
Apr
Mar
Feb
Jan
2015
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2014
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2013
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2012
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2011
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2010
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2009
Dec
Nov
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2008
Dec
Nov
Oct
Sep
Feed
Follow @ChromiumDev
Give us feedback in our
Product Forums
.
高处不胜寒是什么意思
焗油和染发有什么区别
不粘锅涂层是什么材料
真金白银是什么意思
hd什么意思
头疼想吐是什么原因引起的
小青柑是什么茶类
咖啡soe是什么意思
世事无常是什么意思
梦到下雪是什么意思
什么是双重人格
授记是什么意思
火龙果有什么功效
女人肚子大是什么原因
rhd阳性是什么意思
中性皮肤的特征是什么
热狗是什么
月经老是提前是什么原因
动则气喘是什么原因
男人更年期吃什么药
什么是天赋96micro.com
吃什么可以补阳气travellingsim.com
御史相当于现在什么官hcv8jop4ns7r.cn
草莓是什么季节的hcv8jop5ns1r.cn
胃总疼是什么原因hcv8jop6ns4r.cn
上午10点是什么时辰hcv9jop0ns8r.cn
猫砂是什么hcv7jop6ns7r.cn
年检是什么意思hcv8jop3ns3r.cn
全蛋液是什么意思hcv8jop2ns6r.cn
在岸人民币和离岸人民币什么意思hcv7jop9ns8r.cn
天秤座女和什么星座最配hcv9jop7ns3r.cn
点子是什么意思hcv9jop5ns8r.cn
男士脸黑穿什么颜色好hcv8jop6ns6r.cn
女人吃什么排湿气最快hcv7jop6ns5r.cn
骨质破坏是什么意思hcv7jop5ns2r.cn
食指上有痣代表什么hcv9jop4ns0r.cn
慢阻肺吃什么药最有效hcv8jop4ns3r.cn
夏天喝什么好hcv9jop6ns3r.cn
疝是什么意思hcv7jop6ns4r.cn
膀胱炎挂什么科inbungee.com
百度
