src/extensions/common/api/_permission_features.json

   1 // Copyright 2014 The Chromium Authors. All rights reserved.
   2 // Use of this source code is governed by a BSD-style license that can be
   3 // found in the LICENSE file.
   4
   5 // This features file defines permissions for extension APIs implemented
   6 // under src/extensions.
   7
   8 // See extensions/common/features/* to understand this file, in particular
   9 // feature.h, simple_feature.h, and base_feature_provider.h.
  10
  11 // To add a new whitelisted ID, SHA-1 it and force it to uppercase. In Bash:
  12 //
  13 // $ echo -n "aaaabbbbccccddddeeeeffffgggghhhh" | \
  14 // sha1sum | tr '[:lower:]' '[:upper:]'
  15 // 9A0417016F345C934A1A88F55CA17C05014EEEBA  -
  16 //
  17 // Google employees: please update http://go/chrome-api-whitelist to map
  18 // hashes back to ids.
  19
  20 {
  21   "dns": [
  22     {
  23       "channel": "dev",
  24       "extension_types": ["extension", "platform_app"]
  25     },
  26     {
  27       "channel": "stable",
  28       "extension_types": ["extension", "platform_app"],
  29       "whitelist": [
  30         "7AE714FFD394E073F0294CFA134C9F91DB5FBAA4",  // CCD Development
  31         "C7DA3A55C2355F994D3FDDAD120B426A0DF63843",  // CCD Testing
  32         "75E3CFFFC530582C583E4690EF97C70B9C8423B7"   // CCD Release
  33       ]
  34     }
  35   ],
  36   // Note: runtime is not actually a permission, but some systems check these
  37   // values to verify restrictions.
  38   "runtime": {
  39     "channel": "stable",
  40     "extension_types": ["extension", "legacy_packaged_app", "platform_app"]
  41   },
  42   "socket": [
  43     {
  44       "channel": "stable",
  45       "extension_types": ["platform_app"]
  46     },
  47     {
  48       "channel": "stable",
  49       "extension_types": ["extension"],
  50       "whitelist": [
  51         // The connectivity diagnostic utility is a component extension that is
  52         // used to try to provide suggestions on how to fix connection issues.
  53         // It should be the only non-app allowed to use the socket API.
  54         "32A1BA997F8AB8DE29ED1BA94AAF00CF2A3FEFA7"
  55       ]
  56     }
  57   ],
  58   "storage": {
  59     "channel": "stable",
  60     "extension_types": ["extension", "legacy_packaged_app", "platform_app"],
  61     "min_manifest_version": 2
  62   },
  63   "usb": [
  64     {
  65       "channel": "stable",
  66       "extension_types": ["platform_app"]
  67     },
  68     {
  69       "channel": "stable",
  70       "extension_types": ["extension"],
  71       "whitelist": [
  72         "496B6890097EB6E19809ADEADD095A8721FBB2E0",  // FIDO U2F APIs
  73         "E24F1786D842E91E74C27929B0B3715A4689A473"   // CryptoToken
  74       ]
  75     }
  76   ],
  77   "usbDevices": [
  78     {
  79       "channel": "stable",
  80       "extension_types": ["platform_app"]
  81     },
  82     {
  83       "channel": "stable",
  84       "extension_types": ["extension"],
  85       "whitelist": [
  86         "496B6890097EB6E19809ADEADD095A8721FBB2E0",  // FIDO U2F APIs
  87         "E24F1786D842E91E74C27929B0B3715A4689A473"   // CryptoToken
  88       ]
  89     }
  90   ]
  91 }