tree 60056843f69a09741c8a45a31b07500b9c93c946
parent 5896b8e895f33c32e698e3645a55b1739d0a5074
author Devlin Cronin <rdevlin.cronin@chromium.org> 1684282878 +0000
committer Chromium LUCI CQ <chromium-scoped@luci-project-accounts.iam.gserviceaccount.com> 1684282878 +0000

[Extensions] Allow toggling messaging APIs in user script worlds

Allow configuring whether messaging APIs (including
chrome.runtime.connect(), chrome.runtime.sendMessage(),
chrome.runtime.onConnect, and chrome.runtime.onMessage) should be
exposed in a given user script world.

This will allow extensions to decide whether these APIs should be
availabe to a given user script world, which can help to further
reduce the risk of attacks via message passing.

Bug: 1429408
Change-Id: Ifca5dc0b37e55573bde3d879c2f7259ae0ce87dd
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/4505491
Reviewed-by: Matthew Denton <mpdenton@chromium.org>
Reviewed-by: Emilia Paz <emiliapaz@chromium.org>
Commit-Queue: Devlin Cronin <rdevlin.cronin@chromium.org>
Cr-Commit-Position: refs/heads/main@{#1145008}