365DevNet/EnterpriseAppProtection
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

refactor: Update manifest.json for improved security and functionality

Browse Source 
- Revise extension description to better reflect its purpose in protecting against phishing and malicious links.
- Adjust permissions to include 'tabs' and 'webNavigation' while removing 'activeTab' and 'alarms'.
- Simplify host permissions to allow access to all URLs.
- Enhance content security policy to allow connections to specific external resources.
This commit is contained in:
becarta
2025-05-10 03:34:51 +02:00
parent 13d9821b8d
commit f757b4585a
1 changed files with 6 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
manifest.json
View File

@@ -2,16 +2,15 @@
"manifest_version": 3, "manifest_version": 3,
"name": "Enterprise App Protection", "name": "Enterprise App Protection",
"version": "1.0", "version": "1.0",
"description": "Warns when enterprise tool mentions are linked to non-official sites", "description": "Protects enterprise applications from phishing and malicious links",
"permissions": [ "permissions": [
"storage", "storage",
"activeTab", "tabs",
"scripting", "webNavigation",
"alarms" "scripting"
], ],
"host_permissions": [ "host_permissions": [
"https://raw.githubusercontent.com/*", "*://*/*"
"https://safebrowsing.googleapis.com/*"
], ],
"background": { "background": {
"service_worker": "background.js", "service_worker": "background.js",
@@ -44,7 +43,7 @@
}, },
"options_page": "options.html", "options_page": "options.html",
"content_security_policy": { "content_security_policy": {
"extension_pages": "script-src 'self'; object-src 'self'; default-src 'self'", "extension_pages": "script-src 'self'; object-src 'self'; connect-src 'self' https://raw.githubusercontent.com/ https://safebrowsing.googleapis.com/",
"sandbox": "sandbox allow-scripts allow-forms allow-popups allow-modals; script-src 'self' 'unsafe-inline' 'unsafe-eval'; child-src 'self'" "sandbox": "sandbox allow-scripts allow-forms allow-popups allow-modals; script-src 'self' 'unsafe-inline' 'unsafe-eval'; child-src 'self'"
}, },
"web_accessible_resources": [{ "web_accessible_resources": [{