PawletOS/cromite
1
0
Fork 0
Code Issues Pull Requests Actions 5 Packages Projects Releases Wiki Activity

[AUTO][FILECONTROL] - version 133.0.6943.60 (#1780)

Browse Source 
[AUTO][FILECONTROL] - version 133.0.6943.60
This commit is contained in:
uazo
2025-02-10 11:35:18 +04:00
committed by GitHub
parent 3a7040da5f 8950c1c42b
commit 9c23ed4b66
328 changed files with 5544 additions and 5916 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tools/under-control/src/RELEASE
+1 -1
View File
@@ -1 +1 @@
132.0.6834.163
133.0.6943.60
tools/under-control/src/android_webview/browser/aw_content_browser_client.cc
+5 -28
View File
@@ -22,7 +22,6 @@
#include "android_webview/browser/aw_contents_io_thread_client.h"
#include "android_webview/browser/aw_cookie_access_policy.h"
#include "android_webview/browser/aw_devtools_manager_delegate.h"
#include "android_webview/browser/aw_enterprise_helper.h"
#include "android_webview/browser/aw_feature_list_creator.h"
#include "android_webview/browser/aw_http_auth_handler.h"
#include "android_webview/browser/aw_settings.h"
@@ -112,7 +111,6 @@
#include "mojo/public/cpp/bindings/pending_receiver.h"
#include "net/android/network_library.h"
#include "net/cookies/site_for_cookies.h"
#include "net/dns/public/secure_dns_mode.h"
#include "net/http/http_util.h"
#include "net/net_buildflags.h"
#include "net/ssl/ssl_cert_request_info.h"
@@ -286,29 +284,6 @@ void AwContentBrowserClient::OnNetworkServiceCreated(
network_service->SetUpHttpAuth(network::mojom::HttpAuthStaticParams::New());
network_service->ConfigureHttpAuthPrefs(
AwBrowserProcess::GetInstance()->CreateHttpAuthDynamicParams());
if (base::FeatureList::IsEnabled(features::kWebViewAsyncDns)) {
enterprise::GetEnterpriseState(
base::BindOnce([](enterprise::EnterpriseState state) {
switch (state) {
case enterprise::EnterpriseState::kUnknown:
// If we cannot be certain about the enterprise state, we should
// not enable the AsyncDNS resolver, but fall back on the system
// resolver.
case enterprise::EnterpriseState::kEnterpriseOwned:
// On enterprise owned devices, we should use the system resolver
// to make sure that we respect any network settings implemented
// by the device owner.
return;
case enterprise::EnterpriseState::kNotOwned:
content::GetNetworkService()->ConfigureStubHostResolver(
/*insecure_dns_client_enabled=*/true,
net::SecureDnsMode::kAutomatic, net::DnsOverHttpsConfig(),
/*additional_dns_types_enabled=*/true);
break;
}
}));
}
}
void AwContentBrowserClient::ConfigureNetworkContextParams(
@@ -364,7 +339,7 @@ void AwContentBrowserClient::RenderProcessWillLaunch(
// per-view access checks, and access is granted by default (see
// AwSettings.mAllowContentUrlAccess).
content::ChildProcessSecurityPolicy::GetInstance()->GrantRequestScheme(
host->GetID(), url::kContentScheme);
host->GetDeprecatedID(), url::kContentScheme);
}
bool AwContentBrowserClient::IsExplicitNavigation(
@@ -724,7 +699,8 @@ AwContentBrowserClient::CreateURLLoaderThrottles(
/* hash_realtime_service */ nullptr,
/* hash_realtime_selection */
hash_real_time_selection,
/* async_check_tracker */ async_check_tracker));
/* async_check_tracker */ async_check_tracker,
/*referring_app_info=*/std::nullopt));
if (request.destination == network::mojom::RequestDestination::kDocument) {
const bool is_load_url =
@@ -772,7 +748,7 @@ AwContentBrowserClient::CreateURLLoaderThrottlesForKeepAlive(
/* hash_realtime_service */ nullptr,
/* hash_realtime_selection */
hash_real_time_selection,
/* async_check_tracker */ nullptr));
/* async_check_tracker */ nullptr, /*referring_app_info=*/std::nullopt));
return result;
}
@@ -896,6 +872,7 @@ AwContentBrowserClient::CreateLoginDelegate(
const GURL& url,
scoped_refptr<net::HttpResponseHeaders> response_headers,
bool first_auth_attempt,
content::GuestPageHolder* guest,
LoginAuthRequiredCallback auth_required_callback) {
return std::make_unique<AwHttpAuthHandler>(auth_info, web_contents,
first_auth_attempt,
tools/under-control/src/android_webview/browser/aw_field_trials.cc
+45 -62
View File
@@ -9,9 +9,6 @@
#include "base/allocator/partition_alloc_features.h"
#include "base/base_paths_android.h"
#include "base/check.h"
#include "base/feature_list.h"
#include "base/memory/raw_ref.h"
#include "base/metrics/field_trial.h"
#include "base/metrics/field_trial_params.h"
#include "base/metrics/persistent_histogram_allocator.h"
#include "base/path_service.h"
@@ -32,66 +29,47 @@
#include "ui/android/ui_android_features.h"
#include "ui/gl/gl_features.h"
namespace {
namespace internal {
class AwFeatureOverrides {
public:
explicit AwFeatureOverrides(base::FeatureList& feature_list)
: feature_list_(feature_list) {}
AwFeatureOverrides::AwFeatureOverrides(base::FeatureList& feature_list)
: feature_list_(feature_list) {}
AwFeatureOverrides(const AwFeatureOverrides& other) = delete;
AwFeatureOverrides& operator=(const AwFeatureOverrides& other) = delete;
~AwFeatureOverrides() {
for (const auto& field_trial_override : field_trial_overrides_) {
feature_list_->RegisterFieldTrialOverride(
field_trial_override.feature->name,
field_trial_override.override_state,
field_trial_override.field_trial);
}
feature_list_->RegisterExtraFeatureOverrides(std::move(overrides_));
AwFeatureOverrides::~AwFeatureOverrides() {
// TODO(crbug.com/379864779): This doesn't play well with potential server-
// side overrides.
for (const auto& field_trial_override : field_trial_overrides_) {
feature_list_->RegisterFieldTrialOverride(
field_trial_override.feature->name, field_trial_override.override_state,
field_trial_override.field_trial);
}
feature_list_->RegisterExtraFeatureOverrides(
std::move(overrides_), /*replace_use_default_overrides=*/true);
}
// Enable a feature with WebView-specific override.
void EnableFeature(const base::Feature& feature) {
overrides_.emplace_back(
std::cref(feature),
base::FeatureList::OverrideState::OVERRIDE_ENABLE_FEATURE);
}
void AwFeatureOverrides::EnableFeature(const base::Feature& feature) {
overrides_.emplace_back(
std::cref(feature),
base::FeatureList::OverrideState::OVERRIDE_ENABLE_FEATURE);
}
// Disable a feature with WebView-specific override.
void DisableFeature(const base::Feature& feature) {
overrides_.emplace_back(
std::cref(feature),
base::FeatureList::OverrideState::OVERRIDE_DISABLE_FEATURE);
}
void AwFeatureOverrides::DisableFeature(const base::Feature& feature) {
overrides_.emplace_back(
std::cref(feature),
base::FeatureList::OverrideState::OVERRIDE_DISABLE_FEATURE);
}
// Enable or disable a feature with a field trial. This can be used for
// setting feature parameters.
void OverrideFeatureWithFieldTrial(
const base::Feature& feature,
base::FeatureList::OverrideState override_state,
base::FieldTrial* field_trial) {
field_trial_overrides_.emplace_back(FieldTrialOverride{
.feature = raw_ref(feature),
.override_state = override_state,
.field_trial = field_trial,
});
}
void AwFeatureOverrides::OverrideFeatureWithFieldTrial(
const base::Feature& feature,
base::FeatureList::OverrideState override_state,
base::FieldTrial* field_trial) {
field_trial_overrides_.emplace_back(FieldTrialOverride{
.feature = raw_ref(feature),
.override_state = override_state,
.field_trial = field_trial,
});
}
private:
struct FieldTrialOverride {
raw_ref<const base::Feature> feature;
base::FeatureList::OverrideState override_state;
raw_ptr<base::FieldTrial> field_trial;
};
base::raw_ref<base::FeatureList> feature_list_;
std::vector<base::FeatureList::FeatureOverrideInfo> overrides_;
std::vector<FieldTrialOverride> field_trial_overrides_;
};
} // namespace
} // namespace internal
void AwFieldTrials::OnVariationsSetupComplete() {
// Persistent histograms must be enabled ASAP, but depends on Features.
@@ -109,7 +87,7 @@ void AwFieldTrials::RegisterFeatureOverrides(base::FeatureList* feature_list) {
if (!feature_list) {
return;
}
AwFeatureOverrides aw_feature_overrides(*feature_list);
internal::AwFeatureOverrides aw_feature_overrides(*feature_list);
// Disable third-party storage partitioning on WebView.
aw_feature_overrides.DisableFeature(
@@ -143,7 +121,6 @@ void AwFieldTrials::RegisterFeatureOverrides(base::FeatureList* feature_list) {
// Disable Shared Storage on WebView.
aw_feature_overrides.DisableFeature(blink::features::kSharedStorageAPI);
aw_feature_overrides.DisableFeature(blink::features::kSharedStorageAPIM125);
// Disable scrollbar-color on WebView.
aw_feature_overrides.DisableFeature(blink::features::kScrollbarColor);
@@ -247,6 +224,13 @@ void AwFieldTrials::RegisterFeatureOverrides(base::FeatureList* feature_list) {
aw_feature_overrides.DisableFeature(
blink::features::kIncrementLocalSurfaceIdForMainframeSameDocNavigation);
// Disabling this feature for WebView, since it can switch focus when scrolled
// in cases with multiple views which can trigger HTML focus changes that
// aren't intended. See crbug.com/378779896, crbug.com/373672168 for more
// details.
aw_feature_overrides.DisableFeature(
::features::kFocusRenderWidgetHostViewAndroidOnActionDown);
if (base::CommandLine::ForCurrentProcess()->HasSwitch(switches::kDebugBsa)) {
// Feature parameters can only be set via a field trial.
const char kTrialName[] = "StudyDebugBsa";
@@ -289,10 +273,6 @@ void AwFieldTrials::RegisterFeatureOverrides(base::FeatureList* feature_list) {
// WebView.
aw_feature_overrides.DisableFeature(::features::kDIPS);
// TODO(crbug.com/41492947): See crrev.com/c/5744034 for details, but I was
// unable to add this feature to fieldtrial_testing_config and pass all tests.
aw_feature_overrides.EnableFeature(blink::features::kElementGetInnerHTML);
// These features have shown performance improvements in WebView but not some
// other platforms.
aw_feature_overrides.EnableFeature(features::kEnsureExistingRendererAlive);
@@ -309,4 +289,7 @@ void AwFieldTrials::RegisterFeatureOverrides(base::FeatureList* feature_list) {
// WebView.
aw_feature_overrides.DisableFeature(
base::features::kPartitionAllocMemoryTagging);
// Disable Topics on WebView.
aw_feature_overrides.DisableFeature(blink::features::kBrowsingTopics);
}
tools/under-control/src/chrome/android/java/AndroidManifest.xml
+17 -3
View File
@@ -948,7 +948,13 @@ by a child template that "extends" this file.
android:excludeFromRecents="true"
android:windowSoftInputMode="adjustResize"
android:configChanges="orientation|keyboardHidden|keyboard|screenSize|mcc|mnc|screenLayout|smallestScreenSize|uiMode"
android:hardwareAccelerated="false" />
android:hardwareAccelerated="false">
<intent-filter>
<action android:name="android.intent.action.WEB_SEARCH" />
<!-- Permits Chrome to act as a default handler for WEB_SEARCH intents. -->
<category android:name="android.intent.category.DEFAULT" />
</intent-filter>
</activity>
<!-- GcmTaskService for registration for Invalidations. Not actually implemented anymore. -->
<service android:name="com.google.ipc.invalidation.ticl.android2.channel.GcmRegistrationTaskService"
@@ -1088,9 +1094,10 @@ by a child template that "extends" this file.
<!-- Activities for task manager. -->
<activity
android:name="org.chromium.chrome.browser.task_manager.TaskManagerActivity"
android:name="org.chromium.chrome.browser.task_manager.ui.TaskManagerActivity"
android:exported="false"
android:theme="@style/Theme.Chromium.Activity">
android:theme="@style/Theme.Chromium.Activity"
android:launchMode="singleInstance">
</activity>
<receiver android:name="org.chromium.chrome.browser.notifications.scheduler.DisplayAgent$Receiver"
@@ -1335,6 +1342,13 @@ by a child template that "extends" this file.
android:readPermission="android.permission.GLOBAL_SEARCH" />
</provider>
<provider
android:name="org.chromium.chrome.browser.provider.PageContentProvider"
android:authorities="{{ manifest_package }}.PageContentProvider"
android:exported="false"
android:grantUriPermissions="true">
</provider>
{% block base_application_definitions %}
{% endblock %}
{% block extra_application_definitions_for_test %}
tools/under-control/src/chrome/browser/browsing_data/chrome_browsing_data_remover_delegate.cc
+31 -53
View File
@@ -42,9 +42,6 @@
#include "chrome/browser/content_settings/host_content_settings_map_factory.h"
#include "chrome/browser/crash_upload_list/crash_upload_list.h"
#include "chrome/browser/custom_handlers/protocol_handler_registry_factory.h"
#include "chrome/browser/dips/chrome_dips_delegate.h"
#include "chrome/browser/dips/dips_service_impl.h"
#include "chrome/browser/dips/dips_utils.h"
#include "chrome/browser/domain_reliability/service_factory.h"
#include "chrome/browser/downgrade/user_data_downgrade.h"
#include "chrome/browser/download/download_prefs.h"
@@ -91,9 +88,9 @@
#include "chrome/browser/webdata_services/web_data_service_factory.h"
#include "chrome/common/buildflags.h"
#include "chrome/common/url_constants.h"
#include "components/autofill/core/browser/address_data_manager.h"
#include "components/autofill/core/browser/payments_data_manager.h"
#include "components/autofill/core/browser/personal_data_manager.h"
#include "components/autofill/core/browser/data_manager/addresses/address_data_manager.h"
#include "components/autofill/core/browser/data_manager/payments/payments_data_manager.h"
#include "components/autofill/core/browser/data_manager/personal_data_manager.h"
#include "components/autofill/core/browser/strike_databases/strike_database.h"
#include "components/autofill/core/browser/webdata/autofill_webdata_service.h"
#include "components/autofill/core/common/autofill_features.h"
@@ -152,7 +149,6 @@
#include "content/public/browser/browser_task_traits.h"
#include "content/public/browser/browser_thread.h"
#include "content/public/browser/browsing_data_filter_builder.h"
#include "content/public/browser/dips_delegate.h"
#include "content/public/browser/host_zoom_map.h"
#include "content/public/browser/origin_trials_controller_delegate.h"
#include "content/public/browser/prefetch_service_delegate.h"
@@ -200,10 +196,13 @@
#include "content/public/browser/storage_partition_config.h"
#endif // !BUILDFLAG(IS_ANDROID)
#if BUILDFLAG(ENABLE_EXTENSIONS)
#include "chrome/browser/extensions/activity_log/activity_log.h"
#if BUILDFLAG(ENABLE_EXTENSIONS_CORE)
#include "extensions/browser/extension_prefs.h"
#include "extensions/common/constants.h"
#endif // BUILDFLAG(ENABLE_EXTENSIONS_CORE)
#if BUILDFLAG(ENABLE_EXTENSIONS)
#include "chrome/browser/extensions/activity_log/activity_log.h"
#endif // BUILDFLAG(ENABLE_EXTENSIONS)
#if BUILDFLAG(IS_CHROMEOS_ASH)
@@ -256,7 +255,7 @@ bool DoesOriginMatchEmbedderMask(uint64_t origin_type_mask,
<< "|origin_type_mask| can only contain origin types defined in "
<< "the embedder.";
#if BUILDFLAG(ENABLE_EXTENSIONS)
#if BUILDFLAG(ENABLE_EXTENSIONS_CORE)
// Packaged apps and extensions match iff EXTENSION.
if ((origin.scheme() == extensions::kExtensionScheme) &&
(origin_type_mask & constants::ORIGIN_TYPE_EXTENSION)) {
@@ -281,8 +280,7 @@ ChromeBrowsingDataRemoverDelegate::ChromeBrowsingDataRemoverDelegate(
webapp_registry_(std::make_unique<WebappRegistry>())
#endif
,
credential_store_(MakeCredentialStore()),
dips_delegate_(ChromeDipsDelegate::Create()) {
credential_store_(MakeCredentialStore()) {
domain_reliability_clearer_ = base::BindRepeating(
[](BrowserContext* browser_context,
content::BrowsingDataFilterBuilder* filter_builder,
@@ -356,10 +354,10 @@ void ChromeBrowsingDataRemoverDelegate::RemoveEmbedderData(
BrowsingDataFilterBuilder* filter_builder,
uint64_t origin_type_mask,
base::OnceCallback<void(uint64_t)> callback) {
DCHECK(((remove_mask &
~content::BrowsingDataRemover::DATA_TYPE_AVOID_CLOSING_CONNECTIONS &
~constants::FILTERABLE_DATA_TYPES) == 0) ||
filter_builder->MatchesAllOriginsAndDomains());
CHECK(((remove_mask &
~content::BrowsingDataRemover::DATA_TYPE_AVOID_CLOSING_CONNECTIONS &
~constants::FILTERABLE_DATA_TYPES) == 0) ||
filter_builder->MatchesAllOriginsAndDomains());
#if !BUILDFLAG(IS_ANDROID)
DCHECK(!should_clear_sync_account_settings_);
#endif
@@ -392,7 +390,7 @@ void ChromeBrowsingDataRemoverDelegate::RemoveEmbedderData(
base::RecordAction(
UserMetricsAction("ClearBrowsingData_MaskContainsProtectedWeb"));
}
#if BUILDFLAG(ENABLE_EXTENSIONS)
#if BUILDFLAG(ENABLE_EXTENSIONS_CORE)
if (origin_type_mask & constants::ORIGIN_TYPE_EXTENSION) {
base::RecordAction(
UserMetricsAction("ClearBrowsingData_MaskContainsExtension"));
@@ -403,7 +401,7 @@ void ChromeBrowsingDataRemoverDelegate::RemoveEmbedderData(
static_assert(
constants::ALL_ORIGIN_TYPES ==
(content::BrowsingDataRemover::ORIGIN_TYPE_UNPROTECTED_WEB |
#if BUILDFLAG(ENABLE_EXTENSIONS)
#if BUILDFLAG(ENABLE_EXTENSIONS_CORE)
constants::ORIGIN_TYPE_EXTENSION |
#endif
content::BrowsingDataRemover::ORIGIN_TYPE_PROTECTED_WEB),
@@ -906,33 +904,10 @@ void ChromeBrowsingDataRemoverDelegate::RemoveEmbedderData(
->RemoveEmbargoAndResetCounts(filter);
}
// Different types of DIPS events are cleared for DATA_TYPE_HISTORY and
// DATA_TYPE_COOKIES.
DIPSEventRemovalType dips_mask = DIPSEventRemovalType::kNone;
if ((remove_mask & content::BrowsingDataRemover::DATA_TYPE_COOKIES) &&
!filter_builder->PartitionedCookiesOnly()) {
// If there's no delegate, delete everything whenever the user is deleting
// cookies.
dips_mask |= dips_delegate_ ? DIPSEventRemovalType::kStorage
: DIPSEventRemovalType::kAll;
}
// If there's a delegate, ask it whether to delete DIPS history.
if (dips_delegate_ &&
dips_delegate_->ShouldDeleteInteractionRecords(remove_mask)) {
dips_mask |= DIPSEventRemovalType::kHistory;
}
if (dips_mask != DIPSEventRemovalType::kNone) {
if (DIPSServiceImpl* dips_service = DIPSServiceImpl::Get(profile_)) {
dips_service->RemoveEvents(delete_begin_, delete_end_,
filter_builder->BuildNetworkServiceFilter(),
dips_mask);
}
}
//////////////////////////////////////////////////////////////////////////////
// Password manager
if (remove_mask & constants::DATA_TYPE_PASSWORDS) {
CHECK(nullable_filter.is_null());
base::RecordAction(UserMetricsAction("ClearBrowsingData_Passwords"));
auto password_store = ProfilePasswordStoreFactory::GetForProfile(
profile_, ServiceAccessType::EXPLICIT_ACCESS);
@@ -942,9 +917,11 @@ void ChromeBrowsingDataRemoverDelegate::RemoveEmbedderData(
// login token is persisted and can be used after cookie deletion.
// TODO:(crbug.com/1167715) - Test that associated compromised credentials
// are removed.
password_store->RemoveLoginsByURLAndTime(
FROM_HERE, filter, delete_begin_, delete_end_,
CreateTaskCompletionClosure(TracingDataType::kPasswords));
password_store->RemoveLoginsCreatedBetween(
FROM_HERE, delete_begin_, delete_end_,
CreateTaskCompletionCallback(
TracingDataType::kPasswords,
/* data_type_mask= */ constants::DATA_TYPE_PASSWORDS));
}
profile_->GetDefaultStoragePartition()
@@ -999,6 +976,7 @@ void ChromeBrowsingDataRemoverDelegate::RemoveEmbedderData(
}
if (remove_mask & constants::DATA_TYPE_ACCOUNT_PASSWORDS) {
CHECK(nullable_filter.is_null());
auto account_store = AccountPasswordStoreFactory::GetForProfile(
profile_, ServiceAccessType::EXPLICIT_ACCESS);
@@ -1015,9 +993,10 @@ void ChromeBrowsingDataRemoverDelegate::RemoveEmbedderData(
CreateTaskCompletionCallback(TracingDataType::kAccountPasswordsSynced,
constants::DATA_TYPE_ACCOUNT_PASSWORDS);
#endif
account_store->RemoveLoginsByURLAndTime(
FROM_HERE, filter, delete_begin_, delete_end_,
CreateTaskCompletionClosure(TracingDataType::kAccountPasswords),
account_store->RemoveLoginsCreatedBetween(
FROM_HERE, delete_begin_, delete_end_,
CreateTaskCompletionCallback(TracingDataType::kAccountPasswords,
constants::DATA_TYPE_ACCOUNT_PASSWORDS),
std::move(sync_completion));
}
@@ -1117,7 +1096,7 @@ void ChromeBrowsingDataRemoverDelegate::RemoveEmbedderData(
if (render_process_host->GetBrowserContext() == profile_ &&
render_process_host->IsInitializedAndNotDead()) {
web_cache::WebCacheManager::GetInstance()->ClearCacheForProcess(
render_process_host->GetID());
render_process_host->GetDeprecatedID());
}
}
}
@@ -1588,10 +1567,9 @@ void ChromeBrowsingDataRemoverDelegate::OnTaskComplete(
should_clear_sync_account_settings_ = false;
signin::IdentityManager* identity_manager =
IdentityManagerFactory::GetForProfile(profile_);
base::flat_set<std::string> gaia_ids =
signin::GetAllGaiaIdsForKeyedPreferences(
identity_manager,
signin::AccountsInCookieJarInfo() /* empty_cookies */);
base::flat_set<GaiaId> gaia_ids = signin::GetAllGaiaIdsForKeyedPreferences(
identity_manager,
signin::AccountsInCookieJarInfo() /* empty_cookies */);
if (syncer::SyncService* sync_service =
SyncServiceFactory::GetForProfile(profile_);
sync_service) {
tools/under-control/src/chrome/browser/chrome_browser_interface_binders.cc
+74 -61
View File
@@ -19,6 +19,7 @@
#include "chrome/browser/buildflags.h"
#include "chrome/browser/dom_distiller/dom_distiller_service_factory.h"
#include "chrome/browser/history_clusters/history_clusters_service_factory.h"
#include "chrome/browser/history_embeddings/history_embeddings_utils.h"
#include "chrome/browser/media/media_engagement_score_details.mojom.h"
#include "chrome/browser/navigation_predictor/navigation_predictor.h"
#include "chrome/browser/optimization_guide/optimization_guide_internals_ui.h"
@@ -37,9 +38,9 @@
#include "chrome/browser/ui/webui/bluetooth_internals/bluetooth_internals.mojom.h"
#include "chrome/browser/ui/webui/bluetooth_internals/bluetooth_internals_ui.h"
#include "chrome/browser/ui/webui/browsing_topics/browsing_topics_internals_ui.h"
#include "chrome/browser/ui/webui/chrome_urls/chrome_urls_ui.h"
#include "chrome/browser/ui/webui/data_sharing_internals/data_sharing_internals_ui.h"
#include "chrome/browser/ui/webui/engagement/site_engagement_ui.h"
#include "chrome/browser/ui/webui/internals/internals_ui.h"
#include "chrome/browser/ui/webui/location_internals/location_internals.mojom.h"
#include "chrome/browser/ui/webui/location_internals/location_internals_ui.h"
#include "chrome/browser/ui/webui/media/media_engagement_ui.h"
@@ -70,7 +71,6 @@
#include "components/history_clusters/core/features.h"
#include "components/history_clusters/core/history_clusters_service.h"
#include "components/history_clusters/history_clusters_internals/webui/history_clusters_internals_ui.h"
#include "components/history_embeddings/history_embeddings_features.h"
#include "components/language_detection/content/common/language_detection.mojom.h"
#include "components/lens/lens_features.h"
#include "components/live_caption/caption_util.h"
@@ -150,8 +150,8 @@
#include "third_party/blink/public/mojom/installedapp/installed_app_provider.mojom.h"
#else
#include "chrome/browser/badging/badge_manager.h"
#include "chrome/browser/cart/chrome_cart.mojom.h"
#include "chrome/browser/new_tab_page/modules/file_suggestion/drive_suggestion.mojom.h"
#include "chrome/browser/new_tab_page/modules/v2/authentication/microsoft_auth.mojom.h"
#include "chrome/browser/new_tab_page/modules/v2/calendar/google_calendar.mojom.h"
#include "chrome/browser/new_tab_page/modules/v2/calendar/outlook_calendar.mojom.h"
#include "chrome/browser/new_tab_page/modules/v2/most_relevant_tab_resumption/most_relevant_tab_resumption.mojom.h"
@@ -171,15 +171,12 @@
#endif
#include "chrome/browser/ui/lens/lens_overlay_untrusted_ui.h"
#include "chrome/browser/ui/lens/lens_side_panel_untrusted_ui.h"
#include "chrome/browser/ui/lens/search_bubble_ui.h"
#include "chrome/browser/ui/views/side_panel/customize_chrome/customize_chrome_utils.h"
#include "chrome/browser/ui/webui/commerce/product_specifications_ui.h"
#include "chrome/browser/ui/webui/commerce/shopping_insights_side_panel_ui.h"
#include "chrome/browser/ui/webui/data_sharing/data_sharing.mojom.h"
#include "chrome/browser/ui/webui/data_sharing/data_sharing_ui.h"
#include "chrome/browser/ui/webui/hats/hats_ui.h"
#include "chrome/browser/ui/webui/history/history_ui.h"
#include "chrome/browser/ui/webui/internals/user_education/user_education_internals.mojom.h"
#include "chrome/browser/ui/webui/new_tab_page/new_tab_page.mojom.h"
#include "chrome/browser/ui/webui/new_tab_page/new_tab_page_ui.h"
#include "chrome/browser/ui/webui/new_tab_page_third_party/new_tab_page_third_party_ui.h"
@@ -200,6 +197,8 @@
#include "chrome/browser/ui/webui/side_panel/reading_list/reading_list_ui.h"
#include "chrome/browser/ui/webui/tab_search/tab_search.mojom.h"
#include "chrome/browser/ui/webui/tab_search/tab_search_ui.h"
#include "chrome/browser/ui/webui/user_education_internals/user_education_internals.mojom.h"
#include "chrome/browser/ui/webui/user_education_internals/user_education_internals_ui.h"
#include "chrome/browser/ui/webui/webui_gallery/webui_gallery_ui.h"
#include "chrome/browser/web_applications/web_install_service_impl.h"
#include "chrome/common/webui_url_constants.h"
@@ -307,6 +306,8 @@
#include "ash/webui/recorder_app_ui/recorder_app_ui.h"
#include "ash/webui/sanitize_ui/mojom/sanitize_ui.mojom.h"
#include "ash/webui/sanitize_ui/sanitize_ui.h"
#include "ash/webui/scanner_feedback_ui/mojom/scanner_feedback_ui.mojom.h"
#include "ash/webui/scanner_feedback_ui/scanner_feedback_untrusted_ui.h"
#include "ash/webui/scanning/mojom/scanning.mojom.h"
#include "ash/webui/scanning/scanning_ui.h"
#include "ash/webui/shimless_rma/shimless_rma.h"
@@ -488,10 +489,10 @@
#include "components/signin/public/base/signin_switches.h"
#endif // BUILDFLAG(ENABLE_DICE_SUPPORT)
#if BUILDFLAG(ENABLE_ON_DEVICE_TRANSLATION)
#include "chrome/browser/on_device_translation/translation_manager_impl.h"
#include "third_party/blink/public/mojom/on_device_translation/translation_manager.mojom.h"
#endif // BUILDFLAG(ENABLE_ON_DEVICE_TRANSLATION)
#if BUILDFLAG(ENABLE_GLIC)
#include "chrome/browser/glic/glic_enabling.h"
#include "chrome/browser/ui/webui/glic/glic_ui.h"
#endif
namespace chrome::internal {
@@ -788,8 +789,17 @@ void PopulateChromeFrameBinders(
map->Add<translate::mojom::ContentTranslateDriver>(
base::BindRepeating(&translate::BindContentTranslateDriver));
map->Add<language_detection::mojom::ContentLanguageDetectionDriver>(
base::BindRepeating(&translate::BindContentLanguageDetectionDriver));
if (!base::FeatureList::IsEnabled(blink::features::kLanguageDetectionAPI)) {
// When the feature is enabled, the driver is bound by
// browser_interface_binders.cc to make it available to JS execution
// contexts. When the feature is disabled, we bind it here for Chrome's
// page-translation feature.
//
// TODO(https://crbug.com/354069716): Remove this when the flag is removed.
map->Add<language_detection::mojom::ContentLanguageDetectionDriver>(
base::BindRepeating(&translate::BindContentLanguageDetectionDriver));
}
map->Add<blink::mojom::CredentialManager>(
base::BindRepeating(&ChromePasswordManagerClient::BindCredentialManager));
@@ -902,13 +912,6 @@ void PopulateChromeFrameBinders(
base::BindRepeating(&printing::CreateWebPrintingServiceForFrame));
#endif
#if BUILDFLAG(ENABLE_ON_DEVICE_TRANSLATION)
if (base::FeatureList::IsEnabled(blink::features::kEnableTranslationAPI)) {
map->Add<blink::mojom::TranslationManager>(base::BindRepeating(
&on_device_translation::TranslationManagerImpl::Create));
}
#endif
#if BUILDFLAG(IS_ANDROID)
if (base::FeatureList::IsEnabled(blink::features::kPaymentLinkDetection)) {
map->Add<payments::facilitated::mojom::PaymentLinkHandler>(
@@ -956,10 +959,23 @@ void PopulateChromeWebUIFrameBinders(
commerce::mojom::CommerceInternalsHandlerFactory,
commerce::CommerceInternalsUI>(map);
if (base::FeatureList::IsEnabled(features::kInternalOnlyUisPref)) {
RegisterWebUIControllerInterfaceBinder<
chrome_urls::mojom::PageHandlerFactory, chrome_urls::ChromeUrlsUI>(map);
}
RegisterWebUIControllerInterfaceBinder<
data_sharing_internals::mojom::PageHandlerFactory,
DataSharingInternalsUI>(map);
#if BUILDFLAG(ENABLE_GLIC)
if (GlicEnabling::IsEnabledForProfile(Profile::FromBrowserContext(
render_frame_host->GetProcess()->GetBrowserContext()))) {
RegisterWebUIControllerInterfaceBinder<glic::mojom::PageHandlerFactory,
glic::GlicUI>(map);
}
#endif
#if BUILDFLAG(IS_WIN) || BUILDFLAG(IS_MAC) || BUILDFLAG(IS_LINUX) || \
BUILDFLAG(IS_CHROMEOS_ASH)
RegisterWebUIControllerInterfaceBinder<
@@ -1001,12 +1017,6 @@ void PopulateChromeWebUIFrameBinders(
lens::LensOverlayUntrustedUI>(map);
}
if (lens::features::IsLensOverlayEnabled() &&
lens::features::IsLensOverlaySearchBubbleEnabled()) {
RegisterWebUIControllerInterfaceBinder<
lens::mojom::SearchBubblePageHandlerFactory, lens::SearchBubbleUI>(map);
}
RegisterWebUIControllerInterfaceBinder<
color_change_listener::mojom::PageHandler,
#if BUILDFLAG(ENABLE_WEBUI_TAB_STRIP)
@@ -1029,7 +1039,7 @@ void PopulateChromeWebUIFrameBinders(
policy::local_user_files::LocalFilesMigrationUI,
#endif
NewTabPageUI, OmniboxPopupUI, BookmarksSidePanelUI, CustomizeChromeUI,
InternalsUI, ReadingListUI, TabSearchUI, WebuiGalleryUI,
UserEducationInternalsUI, ReadingListUI, TabSearchUI, WebuiGalleryUI,
HistoryClustersSidePanelUI, ShoppingInsightsSidePanelUI,
media_router::AccessCodeCastUI, commerce::ProductSpecificationsUI>(map);
@@ -1049,7 +1059,7 @@ void PopulateChromeWebUIFrameBinders(
HistoryUI,
HistoryClustersSidePanelUI>(map);
}
if (history_embeddings::IsHistoryEmbeddingsEnabled()) {
if (history_embeddings::IsHistoryEmbeddingsFeatureEnabled()) {
if (history_clusters_service &&
history_clusters_service->is_journeys_feature_flag_enabled()) {
RegisterWebUIControllerInterfaceBinder<
@@ -1104,7 +1114,7 @@ void PopulateChromeWebUIFrameBinders(
#endif // BUILDFLAG(CHROME_ROOT_STORE_CERT_MANAGEMENT_UI)
RegisterWebUIControllerInterfaceBinder<
help_bubble::mojom::HelpBubbleHandlerFactory, InternalsUI,
help_bubble::mojom::HelpBubbleHandlerFactory, UserEducationInternalsUI,
settings::SettingsUI, ReadingListUI, NewTabPageUI, CustomizeChromeUI,
PasswordManagerUI, HistoryUI, lens::LensOverlayUntrustedUI,
lens::LensSidePanelUntrustedUI
@@ -1141,12 +1151,17 @@ void PopulateChromeWebUIFrameBinders(
ntp::calendar::mojom::OutlookCalendarPageHandler, NewTabPageUI>(map);
}
#if BUILDFLAG(IS_CHROMEOS_ASH)
if (ash::features::IsBluetoothDisconnectWarningEnabled()) {
if (base::FeatureList::IsEnabled(
ntp_features::kNtpMicrosoftAuthenticationModule)) {
RegisterWebUIControllerInterfaceBinder<
ash::mojom::HidPreservingBluetoothStateController,
ash::settings::OSSettingsUI>(map);
ntp::authentication::mojom::MicrosoftAuthPageHandler, NewTabPageUI>(
map);
}
#if BUILDFLAG(IS_CHROMEOS_ASH)
RegisterWebUIControllerInterfaceBinder<
ash::mojom::HidPreservingBluetoothStateController,
ash::settings::OSSettingsUI>(map);
#endif // defined(IS_CHROMEOS_ASH)
RegisterWebUIControllerInterfaceBinder<
@@ -1165,6 +1180,14 @@ void PopulateChromeWebUIFrameBinders(
ProductSpecificationsHandlerFactory,
commerce::ProductSpecificationsUI, HistoryUI>(map);
RegisterWebUIControllerInterfaceBinder<
commerce::price_tracking::mojom::PriceTrackingHandlerFactory,
ShoppingInsightsSidePanelUI, BookmarksSidePanelUI>(map);
RegisterWebUIControllerInterfaceBinder<
commerce::price_insights::mojom::PriceInsightsHandlerFactory,
ShoppingInsightsSidePanelUI>(map);
RegisterWebUIControllerInterfaceBinder<
side_panel::mojom::CustomizeChromePageHandlerFactory, CustomizeChromeUI>(
map);
@@ -1196,7 +1219,7 @@ void PopulateChromeWebUIFrameBinders(
RegisterWebUIControllerInterfaceBinder<
::mojom::user_education_internals::UserEducationInternalsPageHandler,
InternalsUI>(map);
UserEducationInternalsUI>(map);
RegisterWebUIControllerInterfaceBinder<
::mojom::app_service_internals::AppServiceInternalsPageHandler,
@@ -1256,11 +1279,8 @@ void PopulateChromeWebUIFrameBinders(
ash::settings::mojom::DisplaySettingsProvider,
ash::settings::OSSettingsUI>(map);
if (::features::IsShortcutCustomizationEnabled()) {
RegisterWebUIControllerInterfaceBinder<
ash::common::mojom::AcceleratorFetcher, ash::settings::OSSettingsUI>(
map);
}
RegisterWebUIControllerInterfaceBinder<ash::common::mojom::AcceleratorFetcher,
ash::settings::OSSettingsUI>(map);
RegisterWebUIControllerInterfaceBinder<
ash::common::mojom::ShortcutInputProvider, ash::settings::OSSettingsUI,
@@ -1617,20 +1637,18 @@ void PopulateChromeWebUIFrameBinders(
// NearbyShareDialogUI will not be created for non-primary profiles, and 2)
// rely on the BindInterface implementation of OSSettingsUI to ensure that no
// Nearby Share receivers are bound.
if (base::FeatureList::IsEnabled(features::kNearbySharing)) {
RegisterWebUIControllerInterfaceBinder<
nearby_share::mojom::NearbyShareSettings, ash::settings::OSSettingsUI,
nearby_share::NearbyShareDialogUI>(map);
RegisterWebUIControllerInterfaceBinder<nearby_share::mojom::ContactManager,
ash::settings::OSSettingsUI,
nearby_share::NearbyShareDialogUI>(
map);
RegisterWebUIControllerInterfaceBinder<
nearby_share::mojom::DiscoveryManager,
nearby_share::NearbyShareDialogUI>(map);
RegisterWebUIControllerInterfaceBinder<nearby_share::mojom::ReceiveManager,
ash::settings::OSSettingsUI>(map);
}
RegisterWebUIControllerInterfaceBinder<
nearby_share::mojom::NearbyShareSettings, ash::settings::OSSettingsUI,
nearby_share::NearbyShareDialogUI>(map);
RegisterWebUIControllerInterfaceBinder<nearby_share::mojom::ContactManager,
ash::settings::OSSettingsUI,
nearby_share::NearbyShareDialogUI>(
map);
RegisterWebUIControllerInterfaceBinder<nearby_share::mojom::DiscoveryManager,
nearby_share::NearbyShareDialogUI>(
map);
RegisterWebUIControllerInterfaceBinder<nearby_share::mojom::ReceiveManager,
ash::settings::OSSettingsUI>(map);
#endif // BUILDFLAG(IS_CHROMEOS_ASH)
#if !BUILDFLAG(IS_CHROMEOS) && !BUILDFLAG(IS_ANDROID)
@@ -1778,6 +1796,10 @@ void PopulateChromeWebUIFrameInterfaceBrokers(
registry.ForWebUI<ash::HelpAppUntrustedUI>()
.Add<color_change_listener::mojom::PageHandler>();
registry.ForWebUI<ash::ScannerFeedbackUntrustedUI>()
.Add<color_change_listener::mojom::PageHandler>()
.Add<ash::mojom::scanner_feedback_ui::PageHandler>();
#endif // BUILDFLAG(IS_CHROMEOS_ASH)
#if BUILDFLAG(IS_CHROMEOS_ASH) && !defined(OFFICIAL_BUILD)
@@ -1807,17 +1829,8 @@ void PopulateChromeWebUIFrameInterfaceBrokers(
.Add<help_bubble::mojom::HelpBubbleHandlerFactory>()
.Add<searchbox::mojom::PageHandler>();
}
if (lens::features::IsLensOverlaySearchBubbleEnabled()) {
registry.ForWebUI<lens::SearchBubbleUI>()
.Add<lens::mojom::SearchBubblePageHandlerFactory>()
.Add<searchbox::mojom::PageHandler>()
.Add<color_change_listener::mojom::PageHandler>();
}
registry.ForWebUI<ReadAnythingUntrustedUI>()
.Add<color_change_listener::mojom::PageHandler>();
if (base::FeatureList::IsEnabled(features::kHaTSWebUI)) {
registry.ForWebUI<HatsUI>().Add<hats::mojom::PageHandlerFactory>();
}
if (base::FeatureList::IsEnabled(
data_sharing::features::kDataSharingFeature)) {
tools/under-control/src/chrome/browser/chrome_content_browser_client.cc
+369 -426
View File
File diff suppressed because it is too large Load Diff
tools/under-control/src/chrome/browser/prefs/browser_prefs.cc
+261 -132
View File
@@ -247,7 +247,6 @@
#if BUILDFLAG(IS_ANDROID)
#include "chrome/browser/accessibility/accessibility_prefs/android/accessibility_prefs_controller.h"
#include "chrome/browser/android/bookmarks/partner_bookmarks_shim.h"
#include "chrome/browser/android/ntp/recent_tabs_page_prefs.h"
#include "chrome/browser/android/oom_intervention/oom_intervention_decider.h"
#include "chrome/browser/android/preferences/browser_prefs_android.h"
@@ -257,6 +256,7 @@
#include "chrome/browser/lens/android/lens_prefs.h"
#include "chrome/browser/media/android/cdm/media_drm_origin_id_manager.h"
#include "chrome/browser/notifications/notification_channels_provider_android.h"
#include "chrome/browser/partnerbookmarks/partner_bookmarks_shim.h"
#include "chrome/browser/password_manager/android/password_manager_android_util.h"
#include "chrome/browser/readaloud/android/prefs.h"
#include "chrome/browser/ssl/known_interception_disclosure_infobar_delegate.h"
@@ -268,7 +268,6 @@
#include "components/permissions/contexts/geolocation_permission_context_android.h"
#include "components/webapps/browser/android/install_prompt_prefs.h"
#else // BUILDFLAG(IS_ANDROID)
#include "chrome/browser/cart/cart_service.h"
#include "chrome/browser/device_api/device_service_impl.h"
#include "chrome/browser/gcm/gcm_product_util.h"
#include "chrome/browser/hid/hid_policy_allowed_devices.h"
@@ -278,11 +277,13 @@
#include "chrome/browser/nearby_sharing/common/nearby_share_prefs.h"
#include "chrome/browser/new_tab_page/modules/file_suggestion/drive_service.h"
#include "chrome/browser/new_tab_page/modules/safe_browsing/safe_browsing_handler.h"
#include "chrome/browser/new_tab_page/modules/v2/authentication/microsoft_auth_page_handler.h"
#include "chrome/browser/new_tab_page/modules/v2/calendar/google_calendar_page_handler.h"
#include "chrome/browser/new_tab_page/modules/v2/calendar/outlook_calendar_page_handler.h"
#include "chrome/browser/new_tab_page/modules/v2/most_relevant_tab_resumption/most_relevant_tab_resumption_page_handler.h"
#include "chrome/browser/new_tab_page/promos/promo_service.h"
#include "chrome/browser/policy/developer_tools_policy_handler.h"
#include "chrome/browser/promos/promos_utils.h"
#include "chrome/browser/promos/promos_utils.h" // nogncheck crbug.com/1125897
#include "chrome/browser/screen_ai/pref_names.h"
#include "chrome/browser/search/background/ntp_custom_background_service.h"
#include "chrome/browser/search_engine_choice/search_engine_choice_dialog_service.h"
@@ -457,7 +458,6 @@
#include "components/onc/onc_pref_names.h" // nogncheck
#include "components/quirks/quirks_manager.h"
#include "components/user_manager/user_manager_impl.h"
#include "extensions/browser/api/lock_screen_data/lock_screen_item_storage.h"
#endif // BUILDFLAG(IS_CHROMEOS_ASH)
#if BUILDFLAG(IS_MAC)
@@ -547,46 +547,16 @@
#include "components/enterprise/data_controls/core/browser/prefs.h"
#endif
#if BUILDFLAG(ENABLE_GLIC)
#include "chrome/browser/glic/glic_profile_configuration.h"
#include "chrome/browser/glic/launcher/glic_launcher_configuration.h"
#endif
namespace {
// Please keep the list of deprecated prefs in chronological order. i.e. Add to
// the bottom of the list, not here at the top.
// Deprecated 10/2023.
const char kSyncRequested[] = "sync.requested";
// Deprecated 12/2023.
#if BUILDFLAG(IS_ANDROID)
const char kTemplatesRandomOrder[] = "content_creation.notes.random_order";
#endif
// Deprecated 12/2023.
#if BUILDFLAG(IS_ANDROID)
const char kDesktopSitePeripheralSettingEnabled[] =
"desktop_site.peripheral_setting";
const char kDesktopSiteDisplaySettingEnabled[] = "desktop_site.display_setting";
#endif
// Deprecated 12/2023.
constexpr char kDownloadDuplicateFilePromptEnabled[] =
"download_duplicate_file_prompt_enabled";
// Deprecated 12/2023.
#if BUILDFLAG(IS_CHROMEOS_ASH)
constexpr char kIsolatedWebAppsEnabled[] = "ash.isolated_web_apps_enabled";
#endif // BUILDFLAG(IS_CHROMEOS_ASH)
// Deprecated 12/2023.
const char kPrivacyBudgetReportedReidBlocks[] =
"privacy_budget.reported_reid_blocks";
// Deprecated from profile prefs 12/2023.
const char kModelQualityLoggingClientId[] =
"optimization_guide.model_quality_logging_client_id";
// Deprecated 12/2023.
const char kSync_ExplicitBrowserSignin[] = "sync.explicit_browser_signin";
// Deprecated 01/2024.
const char kPrivacySandboxPageViewed[] = "privacy_sandbox.page_viewed";
@@ -1054,6 +1024,10 @@ inline constexpr char kWhatsNewHatsActivationThreshold[] =
"browser.whats_new_hats_activation_threshold";
#endif
// Deprecated 10/2024.
const char kModelExecutionMainToggleSettingState[] =
"optimization_guide.model_execution_main_toggle_setting_state";
#if BUILDFLAG(IS_CHROMEOS_ASH)
// Deprecated 10/2024
// An integer pref which determines how much FaceGaze should smooth cursor
@@ -1109,6 +1083,11 @@ constexpr char kNoteTakingAppsLockScreenToastShown[] =
"settings.note_taking_apps_lock_screen_toast_shown";
constexpr char kRestoreLastLockScreenNote[] =
"settings.restore_last_lock_screen_note";
constexpr char kLockScreenDataPrefKey[] = "lockScreenDataItems";
inline constexpr char kSyncableVersionedWallpaperInfo[] =
"syncable_versioned_wallpaper_info";
constexpr char kLacrosProxyControllingExtension[] =
"ash.lacros_proxy_controlling_extension";
#endif
// Deprecated 11/2024
@@ -1119,17 +1098,90 @@ constexpr char kPrefixedVideoFullscreenApiAvailability[] =
constexpr char kOnDeviceModelTimeoutCount[] =
"optimization_guide.on_device.timeout_count";
#if !BUILDFLAG(IS_ANDROID)
// Deprecated 11/2024
inline constexpr char kCartModuleHidden[] = "cart_module_hidden";
inline constexpr char kCartModuleWelcomeSurfaceShownTimes[] =
"cart_module_welcome_surface_shown_times";
inline constexpr char kCartDiscountAcknowledged[] =
"cart_discount_acknowledged";
inline constexpr char kCartDiscountEnabled[] = "cart_discount_enabled";
inline constexpr char kCartUsedDiscounts[] = "cart_used_discounts";
inline constexpr char kCartDiscountLastFetchedTime[] =
"cart_discount_last_fetched_time";
inline constexpr char kCartDiscountConsentShown[] =
"cart_discount_consent_shown";
inline constexpr char kDiscountConsentDecisionMadeIn[] =
"discount_consent_decision_made_in";
inline constexpr char kDiscountConsentDismissedIn[] =
"discount_consent_dismissed_in";
inline constexpr char kDiscountConsentLastDimissedTime[] =
"discount_consent_last_dimissed_time";
inline constexpr char kDiscountConsentLastShownInVariation[] =
"discount_consent_last_shown_in";
inline constexpr char kDiscountConsentPastDismissedCount[] =
"discount_consent_dismissed_count";
inline constexpr char kDiscountConsentShowInterest[] =
"discount_consent_show_interest";
inline constexpr char kDiscountConsentShowInterestIn[] =
"discount_consent_show_interest_in";
#endif // !BUILDFLAG(IS_ANDROID)
// Deprecated 11/2024
constexpr char kQuietNotificationPermissionPromoWasShown[] =
"profile.content_settings.quiet_permission_ui_promo.was_shown."
"notifications";
constexpr char kQuietNotificationPermissionShouldShowPromo[] =
"profile.content_settings.quiet_permission_ui_promo.should_show."
"notifications";
inline constexpr char kQuietNotificationPermissionUiEnablingMethod[] =
"profile.content_settings.enable_quiet_permission_ui_enabling_method."
"notifications";
#if BUILDFLAG(IS_CHROMEOS_ASH)
// Deprecated 11/2024
inline constexpr char kHatsPrivacyHubPostLaunchIsSelected[] =
"hats_privacy_hub_postlaunch_is_selected";
inline constexpr char kHatsPrivacyHubPostLaunchCycleEndTs[] =
"hats_privacy_hub_postlaunch_end_timestamp";
#endif
// Deprecated 12/2024.
inline constexpr char kDeleteTimePeriodV2[] =
"browser.clear_data.time_period_v2";
inline constexpr char kDeleteTimePeriodV2Basic[] =
"browser.clear_data.time_period_v2_basic";
#if BUILDFLAG(IS_CHROMEOS_ASH)
// Deprecated 12/2024
const char kCryptAuthDeviceSyncIsRecoveringFromFailure[] =
"cryptauth.device_sync.is_recovering_from_failure";
const char kCryptAuthDeviceSyncLastSyncTimeSeconds[] =
"cryptauth.device_sync.last_device_sync_time_seconds";
const char kCryptAuthDeviceSyncReason[] = "cryptauth.device_sync.reason";
const char kCryptAuthDeviceSyncUnlockKeys[] =
"cryptauth.device_sync.unlock_keys";
const char kCryptAuthEnrollmentIsRecoveringFromFailure[] =
"cryptauth.enrollment.is_recovering_from_failure";
const char kCryptAuthEnrollmentLastEnrollmentTimeSeconds[] =
"cryptauth.enrollment.last_enrollment_time_seconds";
const char kCryptAuthEnrollmentReason[] = "cryptauth.enrollment.reason";
const char kCryptAuthEnrollmentUserPublicKey[] =
"cryptauth.enrollment.user_public_key";
const char kCryptAuthEnrollmentUserPrivateKey[] =
"cryptauth.enrollment.user_private_key";
const char kLacrosLaunchOnLogin[] = "lacros.launch_on_login";
const char kLacrosLaunchSwitch[] = "lacros_launch_switch";
const char kLacrosSelection[] = "lacros_selection";
#endif
// Deprecated 12/2024.
inline constexpr char kPageContentCollectionEnabled[] =
"page_content_collection.enabled";
// Register local state used only for migration (clearing or moving to a new
// key).
void RegisterLocalStatePrefsForMigration(PrefRegistrySimple* registry) {
// Deprecated 12/2023.
#if BUILDFLAG(IS_CHROMEOS_ASH)
registry->RegisterBooleanPref(kIsolatedWebAppsEnabled, false);
#endif
// Deprecated 12/2023.
registry->RegisterStringPref(kPrivacyBudgetReportedReidBlocks, std::string());
// Deprecated 01/2024.
registry->RegisterBooleanPref(kPPAPISharedImagesForVideoDecoderAllowed, true);
@@ -1229,34 +1281,25 @@ void RegisterLocalStatePrefsForMigration(PrefRegistrySimple* registry) {
registry->RegisterBooleanPref(kBeforeunloadEventCancelByPreventDefaultEnabled,
true);
#if BUILDFLAG(IS_CHROMEOS)
// Deprecated 11/2024.
registry->RegisterDictionaryPref(kLockScreenDataPrefKey);
#endif
// Deprecated 11/2024.
registry->RegisterIntegerPref(kOnDeviceModelTimeoutCount, 0);
#if BUILDFLAG(IS_CHROMEOS)
// Deprecated 12/2024.
registry->RegisterIntegerPref(kLacrosLaunchSwitch, 0);
registry->RegisterIntegerPref(kLacrosSelection, 0);
#endif
}
// Register prefs used only for migration (clearing or moving to a new key).
void RegisterProfilePrefsForMigration(
user_prefs::PrefRegistrySyncable* registry) {
chrome_browser_net::secure_dns::RegisterProbesSettingBackupPref(registry);
// Deprecated 10/2023.
registry->RegisterBooleanPref(kSyncRequested, false);
// Deprecated 12/2023.
#if BUILDFLAG(IS_ANDROID)
registry->RegisterListPref(kTemplatesRandomOrder);
#endif
// Deprecated 12/2023.
#if BUILDFLAG(IS_ANDROID)
registry->RegisterBooleanPref(kDesktopSitePeripheralSettingEnabled, false);
registry->RegisterBooleanPref(kDesktopSiteDisplaySettingEnabled, false);
#endif
// Deprecated 12/2023.
registry->RegisterBooleanPref(kDownloadDuplicateFilePromptEnabled, true);
// Deprecated 12/2023.
registry->RegisterInt64Pref(kModelQualityLoggingClientId, true);
registry->RegisterBooleanPref(kSync_ExplicitBrowserSignin, false);
// Deprecated 01/2024.
registry->RegisterBooleanPref(kPrivacySandboxPageViewed, false);
@@ -1524,6 +1567,9 @@ void RegisterProfilePrefsForMigration(
base::Value::List());
#endif // !BUILDFLAG(IS_ANDROID)
// Deprecated 10/2024.
registry->RegisterIntegerPref(kModelExecutionMainToggleSettingState, 0);
// Deprecated 10/2024
#if BUILDFLAG(IS_CHROMEOS)
registry->RegisterBooleanPref(kLacrosSecondaryProfilesAllowed, true);
@@ -1564,23 +1610,76 @@ void RegisterProfilePrefsForMigration(
base::Value::List());
registry->RegisterDictionaryPref(kNoteTakingAppsLockScreenToastShown);
registry->RegisterBooleanPref(kRestoreLastLockScreenNote, false);
registry->RegisterDictionaryPref(kSyncableVersionedWallpaperInfo);
registry->RegisterDictionaryPref(kLacrosProxyControllingExtension);
#endif
// Deprecated 11/2024
registry->RegisterStringPref(kPrefixedVideoFullscreenApiAvailability, "");
}
void ClearSyncRequestedPrefAndMaybeMigrate(PrefService* profile_prefs) {
#if !BUILDFLAG(IS_ANDROID)
// Deprecated 11/2024
registry->RegisterBooleanPref(kCartModuleHidden, false);
registry->RegisterIntegerPref(kCartModuleWelcomeSurfaceShownTimes, 0);
registry->RegisterBooleanPref(kCartDiscountAcknowledged, false);
registry->RegisterBooleanPref(kCartDiscountEnabled, false);
registry->RegisterDictionaryPref(kCartUsedDiscounts);
registry->RegisterTimePref(kCartDiscountLastFetchedTime, base::Time());
registry->RegisterBooleanPref(kCartDiscountConsentShown, false);
registry->RegisterTimePref(kDiscountConsentLastDimissedTime, base::Time());
registry->RegisterIntegerPref(kDiscountConsentPastDismissedCount, 0);
registry->RegisterIntegerPref(kDiscountConsentDecisionMadeIn, 0);
registry->RegisterIntegerPref(kDiscountConsentDismissedIn, 0);
registry->RegisterIntegerPref(kDiscountConsentLastShownInVariation, 0);
registry->RegisterBooleanPref(kDiscountConsentShowInterest, false);
registry->RegisterIntegerPref(kDiscountConsentShowInterestIn, 0);
#endif // !BUILDFLAG(IS_ANDROID)
// Deprecated 11/2024
optimization_guide::model_execution::prefs::
RegisterLegacyUsagePrefsForMigration(registry);
// Deprecated 11/2024
registry->RegisterBooleanPref(kQuietNotificationPermissionPromoWasShown,
true);
registry->RegisterBooleanPref(kQuietNotificationPermissionShouldShowPromo,
true);
registry->RegisterIntegerPref(kQuietNotificationPermissionUiEnablingMethod,
0);
#if BUILDFLAG(IS_CHROMEOS_ASH)
// On Ash specifically, if `kSyncRequested` was set to false explicitly, the
// value needs to be migrated to syncer::internal::kSyncDisabledViaDashboard.
if (profile_prefs->GetUserPrefValue(kSyncRequested) != nullptr &&
!profile_prefs->GetUserPrefValue(kSyncRequested)->GetBool()) {
profile_prefs->SetBoolean(
syncer::prefs::internal::kSyncDisabledViaDashboard, true);
}
// Deprecated 11/2024
registry->RegisterBooleanPref(kHatsPrivacyHubPostLaunchIsSelected, false);
registry->RegisterInt64Pref(kHatsPrivacyHubPostLaunchCycleEndTs, 0);
#endif
profile_prefs->ClearPref(kSyncRequested);
// Deprecated 12/2024.
registry->RegisterIntegerPref(kDeleteTimePeriodV2, -1);
registry->RegisterIntegerPref(kDeleteTimePeriodV2Basic, -1);
#if BUILDFLAG(IS_CHROMEOS_ASH)
// Deprecated 12/2024
registry->RegisterDoublePref(kCryptAuthDeviceSyncLastSyncTimeSeconds, 0.0);
registry->RegisterBooleanPref(kCryptAuthDeviceSyncIsRecoveringFromFailure,
false);
registry->RegisterIntegerPref(kCryptAuthDeviceSyncReason,
cryptauth::INVOCATION_REASON_UNKNOWN);
registry->RegisterListPref(kCryptAuthDeviceSyncUnlockKeys);
registry->RegisterBooleanPref(kCryptAuthEnrollmentIsRecoveringFromFailure,
false);
registry->RegisterDoublePref(kCryptAuthEnrollmentLastEnrollmentTimeSeconds,
0.0);
registry->RegisterIntegerPref(kCryptAuthEnrollmentReason,
cryptauth::INVOCATION_REASON_UNKNOWN);
registry->RegisterStringPref(kCryptAuthEnrollmentUserPublicKey,
std::string());
registry->RegisterStringPref(kCryptAuthEnrollmentUserPrivateKey,
std::string());
registry->RegisterBooleanPref(kLacrosLaunchOnLogin, false);
#endif
// Deprecated 12/2024.
registry->RegisterBooleanPref(kPageContentCollectionEnabled, false);
}
} // namespace
@@ -1679,6 +1778,7 @@ void RegisterLocalState(PrefRegistrySimple* registry) {
#if BUILDFLAG(IS_WIN) && BUILDFLAG(GOOGLE_CHROME_BRANDING)
registry->RegisterBooleanPref(prefs::kFeatureNotificationsEnabled, true);
#endif // BUILDFLAG(IS_WIN) && BUILDFLAG(GOOGLE_CHROME_BRANDING)
registry->RegisterBooleanPref(prefs::kInternalOnlyUisEnabled, false);
#if BUILDFLAG(IS_ANDROID)
registry->RegisterBooleanPref(policy::policy_prefs::kBackForwardCacheEnabled,
true);
@@ -1782,8 +1882,6 @@ void RegisterLocalState(PrefRegistrySimple* registry) {
ash::CryptAuthDeviceIdProviderImpl::RegisterLocalPrefs(registry);
extensions::ExtensionAssetsManagerChromeOS::RegisterPrefs(registry);
extensions::ExtensionsPermissionsTracker::RegisterLocalStatePrefs(registry);
extensions::lock_screen_data::LockScreenItemStorage::RegisterLocalState(
registry);
extensions::login_api::RegisterLocalStatePrefs(registry);
::onc::RegisterPrefs(registry);
policy::AdbSideloadingAllowanceModePolicyHandler::RegisterPrefs(registry);
@@ -1902,6 +2000,14 @@ void RegisterLocalState(PrefRegistrySimple* registry) {
registry->RegisterBooleanPref(prefs::kQRCodeGeneratorEnabled, true);
registry->RegisterIntegerPref(prefs::kChromeDataRegionSetting, 0);
#if BUILDFLAG(ENABLE_GLIC)
glic::GlicLauncherConfiguration::RegisterLocalStatePrefs(registry);
#endif
registry->RegisterIntegerPref(prefs::kToastAlertLevel, 0);
// This is intentionally last.
RegisterLocalStatePrefsForMigration(registry);
}
@@ -1933,6 +2039,9 @@ void RegisterProfilePrefs(user_prefs::PrefRegistrySyncable* registry,
dom_distiller::DistilledPagePrefs::RegisterProfilePrefs(registry);
DownloadPrefs::RegisterProfilePrefs(registry);
fingerprinting_protection_filter::prefs::RegisterProfilePrefs(registry);
#if BUILDFLAG(ENABLE_GLIC)
glic::GlicProfileConfiguration::RegisterProfilePrefs(registry);
#endif
permissions::PermissionHatsTriggerHelper::RegisterProfilePrefs(registry);
history_clusters::prefs::RegisterProfilePrefs(registry);
HostContentSettingsMap::RegisterProfilePrefs(registry);
@@ -2072,8 +2181,8 @@ void RegisterProfilePrefs(user_prefs::PrefRegistrySyncable* registry,
bookmarks_webui::RegisterProfilePrefs(registry);
browser_sync::ForeignSessionHandler::RegisterProfilePrefs(registry);
BrowserUserEducationStorageService::RegisterProfilePrefs(registry);
captions::LiveCaptionController::RegisterProfilePrefs(registry);
captions::LiveTranslateController::RegisterProfilePrefs(registry);
CartService::RegisterProfilePrefs(registry);
ChromeAuthenticatorRequestDelegate::RegisterProfilePrefs(registry);
commerce::CommerceUiTabHelper::RegisterProfilePrefs(registry);
DeviceServiceImpl::RegisterProfilePrefs(registry);
@@ -2089,10 +2198,12 @@ void RegisterProfilePrefs(user_prefs::PrefRegistrySyncable* registry,
NtpCustomBackgroundService::RegisterProfilePrefs(registry);
media_router::RegisterAccessCodeProfilePrefs(registry);
media_router::RegisterProfilePrefs(registry);
MicrosoftAuthPageHandler::RegisterProfilePrefs(registry);
NewTabPageHandler::RegisterProfilePrefs(registry);
NewTabPageUI::RegisterProfilePrefs(registry);
ntp::SafeBrowsingHandler::RegisterProfilePrefs(registry);
ntp_tiles::CustomLinksManagerImpl::RegisterProfilePrefs(registry);
OutlookCalendarPageHandler::RegisterProfilePrefs(registry);
PinnedTabCodec::RegisterProfilePrefs(registry);
policy::DeveloperToolsPolicyHandler::RegisterProfilePrefs(registry);
promos_utils::RegisterProfilePrefs(registry);
@@ -2110,10 +2221,6 @@ void RegisterProfilePrefs(user_prefs::PrefRegistrySyncable* registry,
toolbar::RegisterProfilePrefs(registry);
UnifiedAutoplayConfig::RegisterProfilePrefs(registry);
user_notes::RegisterProfilePrefs(registry);
#if !BUILDFLAG(IS_CHROMEOS_LACROS)
captions::LiveCaptionController::RegisterProfilePrefs(registry);
#endif // !BUILDFLAG(IS_CHROMEOS_LACROS)
#endif // BUILDFLAG(IS_ANDROID)
#if BUILDFLAG(IS_CHROMEOS)
@@ -2163,7 +2270,6 @@ void RegisterProfilePrefs(user_prefs::PrefRegistrySyncable* registry,
ash::ApkWebAppService::RegisterProfilePrefs(registry);
ash::app_time::AppActivityRegistry::RegisterProfilePrefs(registry);
ash::app_time::AppTimeController::RegisterProfilePrefs(registry);
ash::AshProxyMonitor::RegisterProfilePrefs(registry);
ash::assistant::prefs::RegisterProfilePrefs(registry);
ash::auth::AuthFactorConfig::RegisterPrefs(registry);
ash::bluetooth::DebugLogsManager::RegisterPrefs(registry);
@@ -2335,9 +2441,7 @@ void RegisterProfilePrefs(user_prefs::PrefRegistrySyncable* registry,
registry->RegisterDictionaryPref(prefs::kProactiveNudgeDisabledSitesWithTime);
#endif
#if !BUILDFLAG(IS_ANDROID)
registry->RegisterIntegerPref(prefs::kChromeDataRegionSetting, 0);
#endif
registry->RegisterIntegerPref(prefs::kLensOverlayStartCount, 0);
@@ -2389,14 +2493,6 @@ void MigrateObsoleteLocalStatePrefs(PrefService* local_state) {
// BEGIN_MIGRATE_OBSOLETE_LOCAL_STATE_PREFS
// Please don't delete the preceding line. It is used by PRESUBMIT.py.
// Added 12/2023.
#if BUILDFLAG(IS_CHROMEOS_ASH)
local_state->ClearPref(kIsolatedWebAppsEnabled);
#endif
// Added 12/2023.
local_state->ClearPref(kPrivacyBudgetReportedReidBlocks);
// Added 01/2024.
local_state->ClearPref(kPPAPISharedImagesForVideoDecoderAllowed);
@@ -2492,9 +2588,24 @@ void MigrateObsoleteLocalStatePrefs(PrefService* local_state) {
// Added 10/2024.
local_state->ClearPref(kBeforeunloadEventCancelByPreventDefaultEnabled);
// Added 11/2024
#if BUILDFLAG(IS_CHROMEOS)
local_state->ClearPref(kLockScreenDataPrefKey);
#endif
// Added 11/2024
local_state->ClearPref(kOnDeviceModelTimeoutCount);
// Added 11/2024
optimization_guide::model_execution::prefs::MigrateLegacyUsagePrefs(
local_state);
// Added 12/2024
#if BUILDFLAG(IS_CHROMEOS)
local_state->ClearPref(kLacrosLaunchSwitch);
local_state->ClearPref(kLacrosSelection);
#endif
// Please don't delete the following line. It is used by PRESUBMIT.py.
// END_MIGRATE_OBSOLETE_LOCAL_STATE_PREFS
@@ -2535,9 +2646,6 @@ void MigrateObsoleteProfilePrefs(PrefService* profile_prefs,
MigrateDefaultBrowserLastDeclinedPref(profile_prefs);
#endif
// Added 10/2023.
ClearSyncRequestedPrefAndMaybeMigrate(profile_prefs);
#if BUILDFLAG(IS_ANDROID)
// Added 11/2023, but DO NOT REMOVE after the usual year!
// TODO(crbug.com/40268177): The pref kPasswordsUseUPMLocalAndSeparateStores
@@ -2550,40 +2658,6 @@ void MigrateObsoleteProfilePrefs(PrefService* profile_prefs,
profile_path);
#endif
#if !BUILDFLAG(IS_ANDROID)
// Added 12/2023.
password_manager::features_util::MigrateDeclinedSaveOptInToExplicitOptOut(
profile_prefs);
#endif // !BUILDFLAG(IS_ANDROID)
#if BUILDFLAG(IS_ANDROID)
// Added 12/2023.
profile_prefs->ClearPref(kTemplatesRandomOrder);
#endif
#if BUILDFLAG(IS_ANDROID)
// Added 12/2023.
profile_prefs->ClearPref(kDesktopSitePeripheralSettingEnabled);
profile_prefs->ClearPref(kDesktopSiteDisplaySettingEnabled);
#endif
// Added 12/2023.
profile_prefs->ClearPref(kDownloadDuplicateFilePromptEnabled);
// Added 12/2023.
profile_prefs->ClearPref(kModelQualityLoggingClientId);
// Added 12/2023.
// Moving the `kExplicitBrowserSignin` from sync/ to signin/.
// If the sync (old) pref still exists, copy it to signin (new),
// and clear the sync part of the pref.
if (profile_prefs->HasPrefPath(kSync_ExplicitBrowserSignin)) {
profile_prefs->SetBoolean(
prefs::kExplicitBrowserSignin,
profile_prefs->GetBoolean(kSync_ExplicitBrowserSignin));
profile_prefs->ClearPref(kSync_ExplicitBrowserSignin);
}
// Added 01/2024.
profile_prefs->ClearPref(kPrivacySandboxPageViewed);
@@ -2854,6 +2928,9 @@ void MigrateObsoleteProfilePrefs(PrefService* profile_prefs,
profile_prefs->ClearPref(kTabResumeDismissedTabsPrefName);
#endif // !BUILDFLAG(IS_ANDROID)
// Added 10/2024.
profile_prefs->ClearPref(kModelExecutionMainToggleSettingState);
// Added 10/2024
#if BUILDFLAG(IS_CHROMEOS)
profile_prefs->ClearPref(kLacrosSecondaryProfilesAllowed);
@@ -2893,11 +2970,63 @@ void MigrateObsoleteProfilePrefs(PrefService* profile_prefs,
profile_prefs->ClearPref(kNoteTakingAppsLockScreenAllowlist);
profile_prefs->ClearPref(kNoteTakingAppsLockScreenToastShown);
profile_prefs->ClearPref(kRestoreLastLockScreenNote);
profile_prefs->ClearPref(kSyncableVersionedWallpaperInfo);
profile_prefs->ClearPref(kLacrosProxyControllingExtension);
#endif
// Added 11/2024
profile_prefs->ClearPref(kPrefixedVideoFullscreenApiAvailability);
// Added 11/2024
#if !BUILDFLAG(IS_ANDROID)
profile_prefs->ClearPref(kCartModuleHidden);
profile_prefs->ClearPref(kCartModuleWelcomeSurfaceShownTimes);
profile_prefs->ClearPref(kCartDiscountAcknowledged);
profile_prefs->ClearPref(kCartDiscountEnabled);
profile_prefs->ClearPref(kCartUsedDiscounts);
profile_prefs->ClearPref(kCartDiscountLastFetchedTime);
profile_prefs->ClearPref(kCartDiscountConsentShown);
profile_prefs->ClearPref(kDiscountConsentDecisionMadeIn);
profile_prefs->ClearPref(kDiscountConsentDismissedIn);
profile_prefs->ClearPref(kDiscountConsentLastDimissedTime);
profile_prefs->ClearPref(kDiscountConsentLastShownInVariation);
profile_prefs->ClearPref(kDiscountConsentPastDismissedCount);
profile_prefs->ClearPref(kDiscountConsentShowInterest);
profile_prefs->ClearPref(kDiscountConsentShowInterestIn);
#endif // !BUILDFLAG(IS_ANDROID)
// Added 11/2024
profile_prefs->ClearPref(kQuietNotificationPermissionPromoWasShown);
profile_prefs->ClearPref(kQuietNotificationPermissionShouldShowPromo);
profile_prefs->ClearPref(kQuietNotificationPermissionUiEnablingMethod);
#if BUILDFLAG(IS_CHROMEOS_ASH)
// Added 11/2024
profile_prefs->ClearPref(kHatsPrivacyHubPostLaunchIsSelected);
profile_prefs->ClearPref(kHatsPrivacyHubPostLaunchCycleEndTs);
#endif
// Added 12/2024.
profile_prefs->ClearPref(kDeleteTimePeriodV2);
profile_prefs->ClearPref(kDeleteTimePeriodV2Basic);
#if BUILDFLAG(IS_CHROMEOS_ASH)
// Deprecated 12/2024
profile_prefs->ClearPref(kCryptAuthDeviceSyncLastSyncTimeSeconds);
profile_prefs->ClearPref(kCryptAuthDeviceSyncIsRecoveringFromFailure);
profile_prefs->ClearPref(kCryptAuthDeviceSyncReason);
profile_prefs->ClearPref(kCryptAuthDeviceSyncUnlockKeys);
profile_prefs->ClearPref(kCryptAuthEnrollmentIsRecoveringFromFailure);
profile_prefs->ClearPref(kCryptAuthEnrollmentLastEnrollmentTimeSeconds);
profile_prefs->ClearPref(kCryptAuthEnrollmentReason);
profile_prefs->ClearPref(kCryptAuthEnrollmentUserPublicKey);
profile_prefs->ClearPref(kCryptAuthEnrollmentUserPrivateKey);
profile_prefs->ClearPref(kLacrosLaunchOnLogin);
#endif
// Added 12/2024.
profile_prefs->ClearPref(kPageContentCollectionEnabled);
// Please don't delete the following line. It is used by PRESUBMIT.py.
// END_MIGRATE_OBSOLETE_PROFILE_PREFS
tools/under-control/src/chrome/browser/ui/tab_helpers.cc
+16 -25
View File
@@ -27,8 +27,6 @@
#include "chrome/browser/content_settings/mixed_content_settings_tab_helper.h"
#include "chrome/browser/content_settings/page_specific_content_settings_delegate.h"
#include "chrome/browser/content_settings/sound_content_setting_observer.h"
#include "chrome/browser/dips/dips_bounce_detector.h"
#include "chrome/browser/dips/dips_navigation_flow_detector.h"
#include "chrome/browser/external_protocol/external_protocol_observer.h"
#include "chrome/browser/favicon/favicon_utils.h"
#include "chrome/browser/file_system_access/file_system_access_features.h"
@@ -83,8 +81,8 @@
#include "chrome/browser/sync/sessions/sync_sessions_router_tab_helper.h"
#include "chrome/browser/sync/sessions/sync_sessions_web_contents_router_factory.h"
#include "chrome/browser/tab_contents/navigation_metrics_recorder.h"
#include "chrome/browser/tpcd/heuristics/opener_heuristic_tab_helper.h"
#include "chrome/browser/tpcd/heuristics/redirect_heuristic_tab_helper.h"
#include "chrome/browser/task_manager/web_contents_tags.h"
#include "chrome/browser/tpcd/heuristics/opener_heuristic_service.h"
#include "chrome/browser/tpcd/http_error_observer/http_error_tab_helper.h"
#include "chrome/browser/tpcd/metadata/devtools_observer.h"
#include "chrome/browser/tpcd/support/validity_service.h"
@@ -115,7 +113,7 @@
#include "chrome/common/chrome_switches.h"
#include "components/autofill/content/browser/content_autofill_client.h"
#include "components/autofill/content/browser/content_autofill_driver_factory.h"
#include "components/autofill/core/browser/browser_autofill_manager.h"
#include "components/autofill/core/browser/foundations/browser_autofill_manager.h"
#include "components/blocked_content/popup_blocker_tab_helper.h"
#include "components/blocked_content/popup_opener_tab_helper.h"
#include "components/breadcrumbs/core/breadcrumbs_status.h"
@@ -208,7 +206,6 @@
#include "chrome/browser/ui/uma_browsing_activity_observer.h"
#include "chrome/browser/ui/views/side_panel/history_clusters/history_clusters_tab_helper.h"
#include "chrome/browser/ui/views/side_panel/read_anything/read_anything_side_panel_controller.h"
#include "components/commerce/content/browser/hint/commerce_hint_tab_helper.h"
#include "components/image_fetcher/core/image_fetcher_service.h"
#include "components/omnibox/browser/omnibox_field_trial.h"
#include "components/web_modal/web_contents_modal_dialog_manager.h"
@@ -332,17 +329,6 @@ void TabHelpers::AttachTabHelpers(WebContents* web_contents) {
// ChromeSubresourceFilterClient has it as a dependency.
infobars::ContentInfoBarManager::CreateForWebContents(web_contents);
// `PageSpecificContentSettings` (PSCS) needs to come before
// `DIPSWebContentsObserver` for this latter to be correctly added to the PSCS
// observer list.
content_settings::PageSpecificContentSettings::CreateForWebContents(
web_contents,
std::make_unique<PageSpecificContentSettingsDelegate>(web_contents));
// RedirectChainDetector comes before common tab helpers since
// DIPSWebContentsObserver has it as a dependency.
RedirectChainDetector::CreateForWebContents(web_contents);
Profile* profile =
Profile::FromBrowserContext(web_contents->GetBrowserContext());
@@ -402,9 +388,10 @@ void TabHelpers::AttachTabHelpers(WebContents* web_contents) {
commerce::ShoppingServiceFactory::GetForBrowserContext(profile),
ISOLATED_WORLD_ID_CHROME_INTERNAL);
ConnectionHelpTabHelper::CreateForWebContents(web_contents);
content_settings::PageSpecificContentSettings::CreateForWebContents(
web_contents,
std::make_unique<PageSpecificContentSettingsDelegate>(web_contents));
CoreTabHelper::CreateForWebContents(web_contents);
DipsNavigationFlowDetector::CreateForWebContents(web_contents);
DIPSWebContentsObserver::MaybeCreateForWebContents(web_contents);
#if BUILDFLAG(ENABLE_REPORTING)
if (base::FeatureList::IsEnabled(
net::features::kReportingApiEnableEnterpriseCookieIssues)) {
@@ -442,7 +429,7 @@ void TabHelpers::AttachTabHelpers(WebContents* web_contents) {
MixedContentSettingsTabHelper::CreateForWebContents(web_contents);
NavigationMetricsRecorder::CreateForWebContents(web_contents);
NavigationPredictorPreconnectClient::CreateForWebContents(web_contents);
OpenerHeuristicTabHelper::CreateForWebContents(web_contents);
OpenerHeuristicService::Get(web_contents->GetBrowserContext());
if (optimization_guide::features::IsOptimizationHintsEnabled()) {
OptimizationGuideWebContentsObserver::CreateForWebContents(web_contents);
}
@@ -498,7 +485,6 @@ void TabHelpers::AttachTabHelpers(WebContents* web_contents) {
PrefsTabHelper::CreateForWebContents(web_contents);
prerender::NoStatePrefetchTabHelper::CreateForWebContents(web_contents);
RecentlyAudibleHelper::CreateForWebContents(web_contents);
RedirectHeuristicTabHelper::CreateForWebContents(web_contents);
#if BUILDFLAG(IS_ANDROID)
RequestDesktopSiteWebContentsObserverAndroid::CreateForWebContents(
web_contents);
@@ -550,10 +536,17 @@ void TabHelpers::AttachTabHelpers(WebContents* web_contents) {
StorageAccessAPITabHelper::CreateForWebContents(
web_contents, StorageAccessAPIServiceFactory::GetForBrowserContext(
web_contents->GetBrowserContext()));
#if BUILDFLAG(IS_CHROMEOS)
// Do not create for Incognito mode.
if (!profile->IsIncognitoProfile()) {
SupervisedUserNavigationObserver::CreateForWebContents(web_contents);
}
#else
// Do not create for OTR.
if (!profile->IsOffTheRecord()) {
SupervisedUserNavigationObserver::CreateForWebContents(web_contents);
}
#endif
HttpErrorTabHelper::CreateForWebContents(web_contents);
TabUIHelper::CreateForWebContents(web_contents);
tasks::TaskTabHelper::CreateForWebContents(web_contents);
@@ -608,6 +601,7 @@ void TabHelpers::AttachTabHelpers(WebContents* web_contents) {
}
PolicyAuditorBridge::CreateForWebContents(web_contents);
PluginObserverAndroid::CreateForWebContents(web_contents);
task_manager::WebContentsTags::CreateForTabContents(web_contents);
if (base::FeatureList::IsEnabled(payments::facilitated::kEnablePixPayments) ||
base::FeatureList::IsEnabled(blink::features::kPaymentLinkDetection)) {
@@ -617,7 +611,7 @@ void TabHelpers::AttachTabHelpers(WebContents* web_contents) {
web_contents, optimization_guide_decider);
}
}
#else // BUILDFLAG(IS_ANDROID)
#else // BUILDFLAG(IS_ANDROID)
if (web_app::AreWebAppsUserInstallable(profile)) {
webapps::MLInstallabilityPromoter::CreateForWebContents(web_contents);
webapps::AppBannerManagerDesktop::CreateForWebContents(web_contents);
@@ -659,9 +653,6 @@ void TabHelpers::AttachTabHelpers(WebContents* web_contents) {
if (OmniboxFieldTrial::IsZeroSuggestPrefetchingEnabled()) {
ZeroSuggestPrefetchTabHelper::CreateForWebContents(web_contents);
}
if (commerce::isContextualConsentEnabled()) {
commerce_hint::CommerceHintTabHelper::CreateForWebContents(web_contents);
}
#endif // BUILDFLAG(IS_ANDROID)
#if BUILDFLAG(ENABLE_COMPOSE)
tools/under-control/src/chrome/common/extensions/api/autofill_private.idl
+2
View File
@@ -91,6 +91,8 @@ namespace autofillPrivate {
ADDRESS_HOME_HOUSE_NUMBER,
ADDRESS_HOME_SUBPREMISE,
ADDRESS_HOME_OTHER_SUBUNIT,
NAME_LAST_PREFIX,
NAME_LAST_CORE,
NAME_LAST_FIRST,
NAME_LAST_CONJUNCTION,
NAME_LAST_SECOND,
tools/under-control/src/chrome/common/extensions/api/autotest_private.idl
-45
View File
@@ -32,7 +32,6 @@ namespace autotestPrivate {
// A mapping of apps::mojom::Type
enum AppType {
Arc,
BuiltIn,
Crostini,
Extension,
Web,
@@ -283,46 +282,6 @@ namespace autotestPrivate {
callback IsArcPackageListInitialRefreshedCallback = void (boolean refreshed);
// A mapping of crosapi::BrowserManager::State
enum LacrosState {
NotInitialized,
Reloading,
Mounting,
Unavailable,
Stopped,
PreparingForLaunch,
PreLaunched,
Starting,
Running,
WaitingForMojoDisconnected,
WaitingForProcessTerminated
};
// A mapping of crosapi::browser_util::LacrosMode
enum LacrosMode {
Disabled,
Only
};
dictionary LacrosInfo {
// The state of lacros.
LacrosState state;
// True iff keepalive is enabled for lacros.
boolean isKeepAlive;
// Path to lacros-chrome directory. Note that this may change over time if
// omaha is used. This also may be empty if lacros is not running.
DOMString lacrosPath;
// Specifies the mode Lacros is currently running.
// For a full list of supported mode, see LacrosMode enum definition.
// DEPRECATED: please use isEnabled.
// TODO(crbug.com/40286020): Remove this field after tests are fixed.
LacrosMode mode;
// True iff Lacros is enabled for the current user session's primary user.
boolean isEnabled;
};
callback GetLacrosInfoCallback = void (LacrosInfo info);
dictionary ArcAppDict {
DOMString name;
DOMString packageName;
@@ -974,10 +933,6 @@ namespace autotestPrivate {
static void isArcProvisioned(
IsArcProvisionedCallback callback);
// Gets various information about the state of lacros on the system.
static void getLacrosInfo(
GetLacrosInfoCallback callback);
// Gets information about the requested ARC app.
static void getArcApp(
DOMString appId,
tools/under-control/src/chrome/common/extensions/api/certificate_provider.idl
+1 -1
View File
@@ -47,7 +47,7 @@ namespace certificateProvider {
};
// Information about a client certificate.
[noinline_doc] dictionary ClientCertificateInfo {
dictionary ClientCertificateInfo {
// The array must contain the DER encoding of the X.509 client certificate
// as its first element.
// <p>This must include exactly one certificate.</p>
tools/under-control/src/chrome/common/extensions/api/developer_private.idl
+7
View File
@@ -155,6 +155,7 @@ namespace developerPrivate {
boolean custodianApprovalRequired;
boolean parentDisabledPermissions;
boolean unsupportedManifestVersion;
boolean unsupportedDeveloperExtension;
};
dictionary OptionsPage {
@@ -284,6 +285,7 @@ namespace developerPrivate {
boolean? pinnedToToolbar;
boolean isAffectedByMV2Deprecation;
boolean didAcknowledgeMV2DeprecationNotice;
boolean canUploadAsAccountExtension;
};
dictionary ProfileInfo {
@@ -875,6 +877,11 @@ namespace developerPrivate {
// Triggers the dismissal of the mv2 deprecation notice for `extensionId`.
static void dismissMv2DeprecationNoticeForExtension(DOMString extensionId);
// Uploads an extension to the signed in user's account. If the extension is
// not eligible for upload or if there is no signed in user, returns an
// error.
static void uploadExtensionToAccount(DOMString extensionId);
[nocompile, deprecated="Use openDevTools"]
static void inspect(InspectOptions options,
optional VoidCallback callback);
tools/under-control/src/chrome/common/extensions/api/enterprise_platform_keys.idl
+19 -7
View File
@@ -8,7 +8,7 @@
// extension through $(ref:platformKeys chrome.platformKeys).
[platforms = ("chromeos", "lacros")]
namespace enterprise.platformKeys {
[nocompile, noinline_doc] dictionary Token {
[nocompile] dictionary Token {
// Uniquely identifies this <code>Token</code>.
// <p>Static IDs are <code>"user"</code> and <code>"system"</code>,
// referring to the platform's user-specific and the system-wide hardware
@@ -20,10 +20,16 @@ namespace enterprise.platformKeys {
// <a href="http://www.w3.org/TR/WebCryptoAPI/#subtlecrypto-interface">SubtleCrypto</a>
// interface. The cryptographic operations, including key generation, are
// hardware-backed.
// <p>Only non-extractable RSASSA-PKCS1-V1_5 keys with
// <p>Only non-extractable keys can be generated. The supported key types
// are RSASSA-PKCS1-V1_5 and RSA-OAEP (on Chrome versions 134+) with
// <code>modulusLength</code> up to 2048 and ECDSA with
// <code>namedCurve</code> P-256 can be generated. Each key can be
// used for signing data at most once.</p>
// <code>namedCurve</code> P-256. Each RSASSA-PKCS1-V1_5 and ECDSA key can
// be used for signing data at most once, unless the extension is
// allowlisted through the
// <a href="https://chromeenterprise.google/policies/#KeyPermissions">KeyPermissions policy</a>,
// in which case the key can be used indefinitely. RSA-OAEP keys are
// supported since Chrome version 134 and can be used by extensions
// allowlisted through that same policy to unwrap other keys.</p>
// <p>Keys generated on a specific <code>Token</code> cannot be used with
// any other Tokens, nor can they be used with
// <code>window.crypto.subtle</code>. Equally, <code>Key</code> objects
@@ -37,9 +43,15 @@ namespace enterprise.platformKeys {
// software-backed. Protection of the keys, and thus implementation of the
// non-extractable property, is done in software, so the keys are less
// protected than hardware-backed keys.
// <p>Only non-extractable RSASSA-PKCS1-V1_5 keys with
// <code>modulusLength</code> up to 2048 can be generated. Each key can be
// used for signing data at most once.</p>
// <p>Only non-extractable keys can be generated. The supported key types
// are RSASSA-PKCS1-V1_5 and RSA-OAEP (on Chrome versions 134+) with
// <code>modulusLength</code> up to 2048. Each RSASSA-PKCS1-V1_5 key can be
// used for signing data at most once, unless the extension is allowlisted
// through the
// <a href="https://chromeenterprise.google/policies/#KeyPermissions">KeyPermissions policy</a>,
// in which case the key can be used indefinitely. RSA-OAEP keys are
// supported since Chrome version 134 and can be used by extensions
// allowlisted through that same policy to unwrap other keys.</p>
// <p>Keys generated on a specific <code>Token</code> cannot be used with
// any other Tokens, nor can they be used with
// <code>window.crypto.subtle</code>. Equally, <code>Key</code> objects
tools/under-control/src/chrome/common/extensions/api/enterprise_platform_keys_internal.idl
+4 -3
View File
@@ -21,12 +21,13 @@ namespace enterprise.platformKeysInternal {
// Provided for all algorithms.
DOMString name;
// Provided in case of RSASSA-PKCS1-v1_5.
// Provided in case the algorithm is RSASSA-PKCS1-v1_5 or RSA-OAEP
// (the last type is supported on Chrome versions 134+).
long? modulusLength;
ArrayBuffer? publicExponent;
Hash? hash;
// Provided in case of ECDSA.
// Provided in case the algorithm is ECDSA.
DOMString? namedCurve;
};
@@ -45,7 +46,7 @@ namespace enterprise.platformKeysInternal {
static void getTokens(GetTokensCallback callback);
// Internal version of SubtleCrypto.generateKey, currently supporting only
// RSASSA-PKCS1-v1_5 and ECDSA.
// RSASSA-PKCS1-v1_5, RSA-OAEP (on Chrome versions 134+), and ECDSA.
// |tokenId| The id of a Token returned by |getTokens|.
// |algorithm| The algorithm parameters as specified by WebCrypto.
// |softwareBacked| Whether the key operations should be executed in
tools/under-control/src/chrome/common/extensions/api/notifications.idl
+1 -1
View File
@@ -5,7 +5,7 @@
// Use the <code>chrome.notifications</code> API to create rich notifications
// using templates and show these notifications to users in the system tray.
namespace notifications {
[noinline_doc] enum TemplateType {
enum TemplateType {
// Contains an icon, title, message, expandedMessage, and up to two
// buttons.
basic,
tools/under-control/src/chrome/common/extensions/api/pdf_viewer_private.idl
+5
View File
@@ -68,5 +68,10 @@ namespace pdfViewerPrivate {
// Fired when the browser wants the listener to perform a save.
// `streamUrl`: Unique ID for the instance that should perform the save.
static void onSave(DOMString streamUrl);
// Fired when the browser wants the listener to update the viewport based on
// a different PDF URL.
// `pdfUrl`: The string of the PDF URL that should update the viewport.
static void onShouldUpdateViewport(DOMString pdfUrl);
};
};
tools/under-control/src/chrome/common/extensions/api/platform_keys.idl
+1 -1
View File
@@ -8,7 +8,7 @@
// E.g. this allows usage of platform managed certificates in third party VPNs
// (see $(ref:vpnProvider chrome.vpnProvider)).
namespace platformKeys {
[noinline_doc] dictionary Match {
dictionary Match {
// The DER encoding of a X.509 certificate.
ArrayBuffer certificate;
tools/under-control/src/chrome/common/extensions/api/vpn_provider.idl
+2 -2
View File
@@ -108,14 +108,14 @@ namespace vpnProvider {
// to signal completion. The callback is called with
// <code>chrome.runtime.lastError</code> set to error code if
// there is an error.
[inline_doc] callback CallCompleteCallback = void ();
callback CallCompleteCallback = void ();
// The callback is used by <code>createConfig</code> to signal completion.
// The callback is called with <code>chrome.runtime.lastError</code> set to
// an error code if there is an error.
// |id|: A unique ID for the created configuration, or <code>undefined</code>
// on failure.
[inline_doc] callback CreateConfigCompleteCallback = void (DOMString id);
callback CreateConfigCompleteCallback = void (DOMString id);
interface Functions {
// Creates a new VPN configuration that persists across multiple login
tools/under-control/src/chrome/renderer/chrome_content_renderer_client.cc
+6 -12
View File
@@ -39,8 +39,8 @@
#include "chrome/common/pepper_permission_util.h"
#include "chrome/common/ppapi_utils.h"
#include "chrome/common/profiler/chrome_thread_profiler_client.h"
#include "chrome/common/profiler/core_unwinders.h"
#include "chrome/common/profiler/thread_profiler_configuration.h"
#include "chrome/common/profiler/unwind_util.h"
#include "chrome/common/secure_origin_allowlist.h"
#include "chrome/common/url_constants.h"
#include "chrome/common/webui_url_constants.h"
@@ -210,6 +210,7 @@
#if BUILDFLAG(ENABLE_EXTENSIONS_CORE)
#include "chrome/common/initialize_extensions_client.h"
#include "chrome/renderer/extensions/api/chrome_extensions_renderer_api_provider.h"
#include "chrome/renderer/extensions/chrome_extensions_renderer_client.h"
#include "extensions/common/constants.h"
#include "extensions/common/context_data.h"
@@ -224,10 +225,6 @@
#include "third_party/blink/public/web/web_settings.h"
#endif // BUIDFLAG(ENABLE_EXTENSIONS_CORE)
#if BUILDFLAG(ENABLE_EXTENSIONS)
#include "chrome/renderer/extensions/api/chrome_extensions_renderer_api_provider.h"
#endif // BUILDFLAG(ENABLE_EXTENSIONS)
#if BUILDFLAG(ENABLE_GUEST_VIEW)
#include "extensions/renderer/guest_view/mime_handler_view/mime_handler_view_container_manager.h"
#endif // BUILDFLAG(ENABLE_GUEST_VIEW)
@@ -404,7 +401,7 @@ ChromeContentRendererClient::ChromeContentRendererClient()
#endif
}
ChromeContentRendererClient::~ChromeContentRendererClient() {}
ChromeContentRendererClient::~ChromeContentRendererClient() = default;
void ChromeContentRendererClient::RenderThreadStarted() {
RenderThread* thread = RenderThread::Get();
@@ -449,10 +446,10 @@ void ChromeContentRendererClient::RenderThreadStarted() {
extensions::ExtensionsRendererClient::Get();
extensions_renderer_client->AddAPIProvider(
std::make_unique<extensions::CoreExtensionsRendererAPIProvider>());
#if BUILDFLAG(ENABLE_EXTENSIONS)
extensions_renderer_client->AddAPIProvider(
std::make_unique<extensions::ChromeExtensionsRendererAPIProvider>());
#if BUILDFLAG(ENABLE_EXTENSIONS)
extensions_renderer_client->AddAPIProvider(
std::make_unique<
controlled_frame::ControlledFrameExtensionsRendererAPIProvider>());
@@ -1723,10 +1720,7 @@ void ChromeContentRendererClient::
#if BUILDFLAG(ENABLE_EXTENSIONS)
// WebHID and WebUSB on service workers is only available in extensions.
if (IsStandaloneContentExtensionProcess()) {
if (base::FeatureList::IsEnabled(
features::kEnableWebUsbOnExtensionServiceWorker)) {
blink::WebRuntimeFeatures::EnableWebUSBOnServiceWorkers(true);
}
blink::WebRuntimeFeatures::EnableWebUSBOnServiceWorkers(true);
#if !BUILDFLAG(IS_ANDROID)
blink::WebRuntimeFeatures::EnableWebHIDOnServiceWorkers(true);
#endif // !BUILDFLAG(IS_ANDROID)
tools/under-control/src/components/policy/resources/templates/manual_device_policy_proto_map.yaml
-1
View File
@@ -93,7 +93,6 @@ DeviceLoginScreenStickyKeysEnabled: accessibility_settings.login_screen_sticky_k
DeviceLoginScreenSystemInfoEnforced: device_login_screen_system_info_enforced.value
DeviceLoginScreenTouchVirtualKeyboardEnabled: DeviceLoginScreenTouchVirtualKeyboardEnabled.value
DeviceLoginScreenVirtualKeyboardEnabled: accessibility_settings.login_screen_virtual_keyboard_enabled
DeviceLoginScreenWebUILazyLoading: login_web_ui_lazy_loading.enabled
DeviceLoginScreenWebHidAllowDevicesForUrls: device_login_screen_webhid_allow_devices_for_urls.value
DeviceLoginScreenWebUsbAllowDevicesForUrls: device_login_screen_webusb_allow_devices_for_urls.device_login_screen_webusb_allow_devices_for_urls
DeviceMachinePasswordChangeRate: device_machine_password_change_rate.rate_days
tools/under-control/src/components/policy/resources/templates/policies.yaml
+13 -2
View File
@@ -932,7 +932,7 @@ policies:
931: OnPrintEnterpriseConnector
932: UserAgentReduction
933: OriginAgentClusterDefaultEnabled
934: DeviceLoginScreenWebUILazyLoading
934: ''
935: ProjectorEnabled
936: PhoneHubCameraRollAllowed
937: EcheAllowed
@@ -1315,6 +1315,16 @@ policies:
1314: DeviceNativeClientForceAllowed
1315: GenAiLensOverlaySettings
1316: PasswordManagerPasskeysEnabled
1317: FilePickerChooseFromDriveSettings
1318: LiveTranslateEnabled
1319: DevicePowerBatteryChargingOptimization
1320: SmartCardConnectAllowedForUrls
1321: SmartCardConnectBlockedForUrls
1322: DeviceFlexArcPreloadEnabled
1323: AllowedInputMethodsForceEnabled
1324: WebRtcIPHandlingUrl
1325: GenAIPhotoEditingSettings
atomic_groups:
1: Homepage
@@ -1371,4 +1381,5 @@ atomic_groups:
52: DirectSocketsSettings
53: SkyVaultSettings
54: BrowserEventReporting
55: DirectSocketsPrivateNetworkAccessSettings
55: SmartCardConnectSettings
56: WebRtc
tools/under-control/src/components/policy/resources/templates/policy_definitions/Accessibility/AccessibilityShortcutsEnabled.yaml
+1 -2
View File
@@ -23,8 +23,7 @@ items:
- caption: Allow the user to decide
value: null
owners:
- amraboelkher@chromium.org
- emaxx@chromium.org
- file://components/policy/OWNERS
schema:
type: boolean
supported_on:
tools/under-control/src/components/policy/resources/templates/policy_definitions/Accessibility/CursorHighlightEnabled.yaml
+1 -2
View File
@@ -25,8 +25,7 @@ items:
- caption: Allow the user to decide
value: null
owners:
- amraboelkher@chromium.org
- emaxx@chromium.org
- file://components/policy/OWNERS
schema:
type: boolean
supported_on:
tools/under-control/src/components/policy/resources/templates/policy_definitions/Accessibility/DeviceLoginScreenAccessibilityShortcutsEnabled.yaml
+1 -2
View File
@@ -24,8 +24,7 @@ items:
- caption: Allow the user to decide
value: null
owners:
- amraboelkher@chromium.org
- emaxx@chromium.org
- file://components/policy/OWNERS
schema:
type: boolean
supported_on:
tools/under-control/src/components/policy/resources/templates/policy_definitions/Accessibility/DeviceLoginScreenAutoclickEnabled.yaml
+1 -2
View File
@@ -25,8 +25,7 @@ items:
- caption: Allow the user to decide
value: null
owners:
- amraboelkher@chromium.org
- emaxx@chromium.org
- file://components/policy/OWNERS
schema:
type: boolean
supported_on:
tools/under-control/src/components/policy/resources/templates/policy_definitions/Accessibility/DeviceLoginScreenCaretHighlightEnabled.yaml
+1 -2
View File
@@ -23,8 +23,7 @@ items:
- caption: Allow the user to decide
value: null
owners:
- amraboelkher@chromium.org
- emaxx@chromium.org
- file://components/policy/OWNERS
schema:
type: boolean
supported_on:
tools/under-control/src/components/policy/resources/templates/policy_definitions/Accessibility/DeviceLoginScreenCursorHighlightEnabled.yaml
+1 -2
View File
@@ -23,8 +23,7 @@ items:
- caption: Allow the user to decide
value: null
owners:
- amraboelkher@chromium.org
- emaxx@chromium.org
- file://components/policy/OWNERS
schema:
type: boolean
supported_on:
tools/under-control/src/components/policy/resources/templates/policy_definitions/Accessibility/DeviceLoginScreenDefaultSpokenFeedbackEnabled.yaml
+1 -2
View File
@@ -22,8 +22,7 @@ items:
- caption: Allow the user to decide
value: null
owners:
- amraboelkher@chromium.org
- emaxx@chromium.org
- file://components/policy/OWNERS
schema:
type: boolean
supported_on:
tools/under-control/src/components/policy/resources/templates/policy_definitions/Accessibility/DeviceLoginScreenDictationEnabled.yaml
+1 -2
View File
@@ -23,8 +23,7 @@ items:
- caption: Allow the user to decide
value: null
owners:
- amraboelkher@chromium.org
- emaxx@chromium.org
- file://components/policy/OWNERS
schema:
type: boolean
supported_on:
tools/under-control/src/components/policy/resources/templates/policy_definitions/Accessibility/DeviceLoginScreenHighContrastEnabled.yaml
+1 -2
View File
@@ -23,8 +23,7 @@ items:
- caption: Allow the user to decide
value: null
owners:
- amraboelkher@chromium.org
- emaxx@chromium.org
- file://components/policy/OWNERS
schema:
type: boolean
supported_on:
tools/under-control/src/components/policy/resources/templates/policy_definitions/Accessibility/DeviceLoginScreenLargeCursorEnabled.yaml
+1 -2
View File
@@ -23,8 +23,7 @@ items:
- caption: Allow the user to decide
value: null
owners:
- amraboelkher@chromium.org
- emaxx@chromium.org
- file://components/policy/OWNERS
schema:
type: boolean
supported_on:
tools/under-control/src/components/policy/resources/templates/policy_definitions/Accessibility/DeviceLoginScreenMonoAudioEnabled.yaml
+1 -2
View File
@@ -25,8 +25,7 @@ items:
- caption: Allow the user to decide
value: null
owners:
- amraboelkher@chromium.org
- emaxx@chromium.org
- file://components/policy/OWNERS
schema:
type: boolean
supported_on:
tools/under-control/src/components/policy/resources/templates/policy_definitions/Accessibility/DeviceLoginScreenScreenMagnifierType.yaml
+1 -2
View File
@@ -28,8 +28,7 @@ items:
name: Docked
value: 2
owners:
- amraboelkher@chromium.org
- emaxx@chromium.org
- file://components/policy/OWNERS
schema:
enum:
- 0
tools/under-control/src/components/policy/resources/templates/policy_definitions/Accessibility/DeviceLoginScreenSelectToSpeakEnabled.yaml
+1 -2
View File
@@ -23,8 +23,7 @@ items:
- caption: Allow the user to decide
value: null
owners:
- amraboelkher@chromium.org
- emaxx@chromium.org
- file://components/policy/OWNERS
schema:
type: boolean
supported_on:
tools/under-control/src/components/policy/resources/templates/policy_definitions/Accessibility/DeviceLoginScreenSpokenFeedbackEnabled.yaml
+1 -2
View File
@@ -23,8 +23,7 @@ items:
- caption: Allow the user to decide
value: null
owners:
- amraboelkher@chromium.org
- emaxx@chromium.org
- file://components/policy/OWNERS
schema:
type: boolean
supported_on:
tools/under-control/src/components/policy/resources/templates/policy_definitions/Accessibility/DeviceLoginScreenStickyKeysEnabled.yaml
+1 -2
View File
@@ -23,8 +23,7 @@ items:
- caption: Allow the user to decide
value: null
owners:
- amraboelkher@chromium.org
- emaxx@chromium.org
- file://components/policy/OWNERS
schema:
type: boolean
supported_on:
tools/under-control/src/components/policy/resources/templates/policy_definitions/Accessibility/DictationEnabled.yaml
+1 -2
View File
@@ -23,8 +23,7 @@ items:
- caption: Allow the user to decide
value: null
owners:
- amraboelkher@chromium.org
- emaxx@chromium.org
- file://components/policy/OWNERS
schema:
type: boolean
supported_on:
tools/under-control/src/components/policy/resources/templates/policy_definitions/Accessibility/LiveTranslateEnabled.yaml
Executable
+33
View File
@@ -0,0 +1,33 @@
caption: Enable Live Translate
default: null
desc: |-
Enable translation of live captions. Captions will be sent to Google for translation.
If this policy is set to Enabled, Live Translate will always be turned on.
If this policy is set to Disabled, Live Translate will always be turned off.
If you set this policy as mandatory, users cannot change or override it.
If this policy is left unset, Live Translate is disabled initially but can be enabled by the user anytime.
example_value: true
features:
can_be_recommended: true
dynamic_refresh: true
per_profile: true
items:
- caption: Enable Live Translate
value: true
- caption: Disable Live Translate
value: false
- caption: Allow the user to decide
value: null
owners:
- evliu@google.com
- chrome-media-ux@google.com
schema:
type: boolean
supported_on:
- chrome.*:133-
tags: []
type: main
tools/under-control/src/components/policy/resources/templates/policy_definitions/Accessibility/StickyKeysEnabled.yaml
+1 -2
View File
@@ -17,8 +17,7 @@ items:
- caption: Allow the user to decide
value: null
owners:
- amraboelkher@chromium.org
- emaxx@chromium.org
- file://components/policy/OWNERS
schema:
type: boolean
supported_on:
tools/under-control/src/components/policy/resources/templates/policy_definitions/Arc/ArcEnabled.yaml
+2
View File
@@ -4,6 +4,8 @@ default_for_enterprise_users: false
desc: Unless Ephemeral mode or multiple sign-in is on during the user's session, setting
ArcEnabled to True turns ARC on for the user. Setting the policy to False or leaving
it unset means enterprise users can't use ARC.
This policy only controls <ph name="ARC_VM">ArcVM</ph> on <ph name="PRODUCT_NAME">$2<ex>Google ChromeOS</ex></ph>. For <ph name="PRODUCT_OS_FLEX_NAME">Google ChromeOS Flex</ph>, please see the <ph name="DEVICE_FLEX_ARC_PRELOAD_ENABLED_POLICY_NAME">DeviceFlexArcPreloadEnabled</ph> policy for more details.
example_value: false
features:
dynamic_refresh: true
tools/under-control/src/components/policy/resources/templates/policy_definitions/Arc/ArcLocationServiceEnabled.yaml
-1
View File
@@ -8,7 +8,6 @@ features:
per_profile: false
owners:
- file://components/policy/OWNERS
- emaxx@chromium.org
schema:
type: boolean
supported_on:
tools/under-control/src/components/policy/resources/templates/policy_definitions/Arc/ArcPolicy.yaml
+1 -1
View File
@@ -50,7 +50,7 @@ features:
per_profile: false
owners:
- arc-commercial@google.com
- mhasank@chromium.org
- yaohuali@google.com
schema:
type: string
supported_on:
tools/under-control/src/components/policy/resources/templates/policy_definitions/Arc/DeviceFlexArcPreloadEnabled.yaml
Executable
+31
View File
@@ -0,0 +1,31 @@
caption: Preload <ph name="ARC_VM">ArcVM</ph> image On Flex
default: false
desc: |-
This policy allows preload <ph name="ARC_VM">ArcVM</ph> image to the device installed with <ph name="PRODUCT_OS_FLEX_NAME">Google ChromeOS Flex</ph>.
Setting the policy to Enabled will allow <ph name="ARC_VM">ArcVM</ph> image to be preloaded on <ph name="PRODUCT_OS_FLEX_NAME">Google ChromeOS Flex</ph> separately.
Setting the policy to Disabled or not set will block <ph name="ARC_VM">ArcVM</ph> image from preloading on <ph name="PRODUCT_OS_FLEX_NAME">Google ChromeOS Flex</ph> separately.
If an image has already been downloaded and the policy is subsequently updated, the image will only be removed after the user signs out or reboots the device.
This policy only controls <ph name="ARC_VM">ArcVM</ph> on <ph name="PRODUCT_OS_FLEX_NAME">Google ChromeOS Flex</ph>. For <ph name="PRODUCT_NAME">$2<ex>Google ChromeOS</ex></ph>, please see the <ph name="ARC_ENABLED_POLICY_NAME">ArcEnabled</ph> policy for more details.
device_only: true
example_value: false
features:
dynamic_refresh: false
per_profile: false
items:
- caption: Enable <ph name="ARC_VM">ArcVM</ph> image preload
value: true
- caption: Disable <ph name="ARC_VM">ArcVM</ph> image preload
value: false
owners:
- chromeos-flex-eng@google.com
- jiaozhou@google.com
schema:
type: boolean
supported_on:
- chrome_os:133-
tags: []
type: main
tools/under-control/src/components/policy/resources/templates/policy_definitions/Arc/UnaffiliatedArcAllowed.yaml
+1 -1
View File
@@ -15,7 +15,7 @@ items:
value: false
owners:
- arc-commercial@google.com
- mhasank@chromium.org
- yaohuali@google.com
schema:
type: boolean
supported_on:
tools/under-control/src/components/policy/resources/templates/policy_definitions/Attestation/AttestationEnabledForDevice.yaml
-1
View File
@@ -17,7 +17,6 @@ items:
- caption: Disable remote attestation for the device
value: false
owners:
- emaxx@chromium.org
- file://chrome/browser/ash/attestation/OWNERS
schema:
type: boolean
tools/under-control/src/components/policy/resources/templates/policy_definitions/Attestation/AttestationEnabledForUser.yaml
-1
View File
@@ -16,7 +16,6 @@ items:
- caption: Disable remote attestation for the user
value: false
owners:
- emaxx@chromium.org
- file://chrome/browser/ash/attestation/OWNERS
schema:
type: boolean
tools/under-control/src/components/policy/resources/templates/policy_definitions/Attestation/AttestationExtensionAllowlist.yaml
-1
View File
@@ -9,7 +9,6 @@ features:
dynamic_refresh: true
per_profile: true
owners:
- emaxx@chromium.org
- file://chrome/browser/extensions/api/enterprise_platform_keys/OWNERS
schema:
items:
tools/under-control/src/components/policy/resources/templates/policy_definitions/Attestation/AttestationForContentProtectionEnabled.yaml
-1
View File
@@ -14,7 +14,6 @@ items:
- caption: Disable remote attestation for content protection
value: false
owners:
- emaxx@chromium.org
- file://chrome/browser/ash/attestation/OWNERS
schema:
type: boolean
tools/under-control/src/components/policy/resources/templates/policy_definitions/BrowserEventReporting/ReportingEndpoints.yaml
+1 -1
View File
@@ -12,7 +12,7 @@ features:
dynamic_refresh: true
per_profile: true
owners:
- sandormajor@google.com
- sandormajor@chromium.org
- selya@google.com
schema:
type: object
tools/under-control/src/components/policy/resources/templates/policy_definitions/ContentSettings/DefaultJavaScriptOptimizerSetting.yaml
+5 -5
View File
@@ -19,11 +19,11 @@ example_value: 1
features:
dynamic_refresh: true
per_profile: true
future_on:
- android
- chrome.*
- chrome_os
- fuchsia
supported_on:
- android:133-
- chrome.*:133-
- chrome_os:133-
- fuchsia:133-
items:
- caption: Enable advanced JavaScript optimizations on all sites
name: AllowJavaScriptOptimizer
tools/under-control/src/components/policy/resources/templates/policy_definitions/ContentSettings/JavaScriptOptimizerAllowedForSites.yaml
+5 -5
View File
@@ -33,11 +33,11 @@ example_value:
features:
dynamic_refresh: true
per_profile: true
future_on:
- android
- chrome.*
- chrome_os
- fuchsia
supported_on:
- android:133-
- chrome.*:133-
- chrome_os:133-
- fuchsia:133-
owners:
- ellyjones@chromium.org
- wfh@chromium.org
tools/under-control/src/components/policy/resources/templates/policy_definitions/ContentSettings/JavaScriptOptimizerBlockedForSites.yaml
+5 -5
View File
@@ -37,11 +37,11 @@ example_value:
features:
dynamic_refresh: true
per_profile: true
future_on:
- android
- chrome.*
- chrome_os
- fuchsia
supported_on:
- android:133-
- chrome.*:133-
- chrome_os:133-
- fuchsia:133-
owners:
- ellyjones@chromium.org
- wfh@chromium.org
tools/under-control/src/components/policy/resources/templates/policy_definitions/ContentSettings/SmartCardConnectAllowedForUrls.yaml
Executable
+24
View File
@@ -0,0 +1,24 @@
caption: Allow Smart Card connection by Isolated Apps
desc: |-
Setting the policy specifies which Isolated Web Apps (IWAs) can connect to smart cards using Web Smart Card API without having the user prompted for permission. This policy does not accept wildcards.
This policy overrides <ph name="POLICY_NAME">SmartCardConnectBlockedForUrls</ph>; in particular, a blocklist value of <ph name="ALL_ISOLATED_WEB_APPS">*</ph> means that all IWAs will be unable to connect to smart card readers (users won't even be prompted for permission) except for the ones listed in this policy.
By default, IWAs that specify Smart Card permissions within their manifest can connect to smart cards provided that user grants the permission interactively per-reader.
example_value:
- isolated-app://egoxo6biqdjrk62rman4vvr5cbq2ozsyydig7jmdxcmohdob2ecaaaic
- isolated-app://anayaszofsyqapbofoli7ljxoxkp32qkothweire2o6t7xy6taz6oaacai
features:
dynamic_refresh: true
per_profile: true
future_on:
- chrome_os
owners:
- file://content/browser/smart_card/OWNERS
schema:
items:
type: string
type: array
tags: []
type: list
tools/under-control/src/components/policy/resources/templates/policy_definitions/ContentSettings/SmartCardConnectBlockedForUrls.yaml
Executable
+24
View File
@@ -0,0 +1,24 @@
caption: Block Smart Card connection by Isolated Apps
desc: |-
Setting the policy specifies which Isolated Web Apps (IWAs) won't be able to connect to smart card readers (users won't even be prompted for permission). This policy accepts wildcards - for example, <ph name="ALL_ISOLATED_WEB_APPS">*</ph> will block access for all IWAs.
This policy is overridden by <ph name="POLICY_NAME">SmartCardConnectAllowedForUrls</ph>; in particular, a blocklist value of <ph name="ALL_ISOLATED_WEB_APPS">*</ph> means that all IWAs will be unable to connect to smart card readers (users won't even be prompted for permission) except for the ones listed in <ph name="POLICY_NAME">SmartCardConnectAllowedForUrls</ph>.
By default, IWAs that specify Smart Card permissions within their manifest can connect to smart cards provided that user grants the permission interactively per-reader.
example_value:
- isolated-app://egoxo6biqdjrk62rman4vvr5cbq2ozsyydig7jmdxcmohdob2ecaaaic
- isolated-app://anayaszofsyqapbofoli7ljxoxkp32qkothweire2o6t7xy6taz6oaacai
features:
dynamic_refresh: true
per_profile: true
future_on:
- chrome_os
owners:
- file://content/browser/smart_card/OWNERS
schema:
items:
type: string
type: array
tags: []
type: list
tools/under-control/src/components/policy/resources/templates/policy_definitions/ContentSettings/policy_atomic_groups.yaml
+5
View File
@@ -96,3 +96,8 @@ DirectSocketsSettings:
- DefaultDirectSocketsPrivateNetworkAccessSetting
- DirectSocketsPrivateNetworkAccessAllowedForUrls
- DirectSocketsPrivateNetworkAccessBlockedForUrls
SmartCardConnectSettings:
caption: Smart Card Connect settings
policies:
- SmartCardConnectAllowedForUrls
- SmartCardConnectBlockedForUrls
tools/under-control/src/components/policy/resources/templates/policy_definitions/DefaultSearchProvider/DefaultSearchProviderEnabled.yaml
+2 -2
View File
@@ -5,9 +5,9 @@ desc: |-
If you set the policy, users can't change it in <ph name="PRODUCT_NAME">$1<ex>Google Chrome</ex></ph>. If not set, the default search provider is on, and users can set the search provider list.
On <ph name="MS_WIN_NAME">Microsoft® Windows®</ph>, this policy is only available on instances that are joined to a <ph name="MS_AD_NAME">Microsoft® Active Directory®</ph> domain, joined to <ph name="MS_AAD_NAME">Microsoft® Azure® Active Directory®</ph> or enrolled in <ph name="CHROME_BROWSER_CLOUD_MANAGEMENT_NAME">Chrome Browser Cloud Management</ph>.
On <ph name="MS_WIN_NAME">Microsoft® Windows®</ph>, this policy is only available on instances that are joined to a <ph name="MS_AD_NAME">Microsoft® Active Directory®</ph> domain, joined to <ph name="MS_AAD_NAME">Microsoft® Azure® Active Directory®</ph> or enrolled in <ph name="CHROME_ENTERPRISE_CORE_NAME">Chrome Enterprise Core</ph>.
On <ph name="MAC_OS_NAME">macOS</ph>, this policy is only available on instances that are managed via MDM, joined to a domain via MCX or enrolled in <ph name="CHROME_BROWSER_CLOUD_MANAGEMENT_NAME">Chrome Browser Cloud Management</ph>.
On <ph name="MAC_OS_NAME">macOS</ph>, this policy is only available on instances that are managed via MDM, joined to a domain via MCX or enrolled in <ph name="CHROME_ENTERPRISE_CORE_NAME">Chrome Enterprise Core</ph>.
example_value: true
features:
can_be_recommended: true
tools/under-control/src/components/policy/resources/templates/policy_definitions/Extensions/ExtensionInstallForcelist.yaml
+2 -2
View File
@@ -14,9 +14,9 @@ desc: |-
Each list item of the policy is a string that contains an extension ID and, optionally, an update URL separated by a semicolon (;). The extension ID is the 32-letter string found, for example, on chrome://extensions when in Developer mode. If specified, the update URL should point to an Update Manifest XML document ( https://developer.chrome.com/extensions/autoupdate ). The update URL should use one of the following schemes: <ph name="HTTP_SCHEME">http</ph>, <ph name="HTTPS_SCHEME">https</ph> or <ph name="FILE_SCHEME">file</ph>. By default, the Chrome Web Store's update URL is used. The update URL set in this policy is only used for the initial installation; subsequent updates of the extension use the update URL in the extension's manifest. The update url for subsequent updates can be overridden using the <ph name="EXTENSION_SETTINGS_POLICY_NAME">ExtensionSettings</ph> policy, see http://support.google.com/chrome/a?p=Configure_ExtensionSettings_policy.
On <ph name="MS_WIN_NAME">Microsoft® Windows®</ph> instances, apps and extensions from outside the Chrome Web Store can only be forced installed if the instance is joined to a <ph name="MS_AD_NAME">Microsoft® Active Directory®</ph> domain, joined to <ph name="MS_AAD_NAME">Microsoft® Azure® Active Directory®</ph> or enrolled in <ph name="CHROME_BROWSER_CLOUD_MANAGEMENT_NAME">Chrome Browser Cloud Management</ph>.
On <ph name="MS_WIN_NAME">Microsoft® Windows®</ph> instances, apps and extensions from outside the Chrome Web Store can only be forced installed if the instance is joined to a <ph name="MS_AD_NAME">Microsoft® Active Directory®</ph> domain, joined to <ph name="MS_AAD_NAME">Microsoft® Azure® Active Directory®</ph> or enrolled in <ph name="CHROME_ENTERPRISE_CORE_NAME">Chrome Enterprise Core</ph>.
On <ph name="MAC_OS_NAME">macOS</ph> instances, apps and extensions from outside the Chrome Web Store can only be force installed if the instance is managed via MDM, joined to a domain via MCX or enrolled in <ph name="CHROME_BROWSER_CLOUD_MANAGEMENT_NAME">Chrome Browser Cloud Management</ph>.
On <ph name="MAC_OS_NAME">macOS</ph> instances, apps and extensions from outside the Chrome Web Store can only be force installed if the instance is managed via MDM, joined to a domain via MCX or enrolled in <ph name="CHROME_ENTERPRISE_CORE_NAME">Chrome Enterprise Core</ph>.
Note: This policy doesn't apply to Incognito mode. Read about hosting extensions ( https://developer.chrome.com/extensions/hosting ).
example_value:
tools/under-control/src/components/policy/resources/templates/policy_definitions/Extensions/ExtensionSettings.yaml
+2 -2
View File
@@ -4,9 +4,9 @@ desc: |-
This policy maps an extension ID or an update URL to its specific setting only. A default configuration can be set for the special ID <ph name="DEFAULT_SCOPE">"*"</ph>, which applies to all extensions without a custom configuration in this policy. With an update URL, configuration applies to extensions with the exact update URL stated in the extension manifest ( http://support.google.com/chrome/a?p=Configure_ExtensionSettings_policy ). If the 'override_update_url' flag is set to true, the extension is installed and updated using the "update" URL specified in the <ph name="EXTENSION_INSTALL_FORCELIST_POLICY_NAME">ExtensionInstallForcelist</ph> policy or in 'update_url' field in this policy. The flag 'override_update_url' is ignored if the 'update_url' is a Chrome Web Store url.
On <ph name="MS_WIN_NAME">Microsoft® Windows®</ph> instances, apps and extensions from outside the Chrome Web Store can only be forced installed if the instance is joined to a <ph name="MS_AD_NAME">Microsoft® Active Directory®</ph> domain, joined to <ph name="MS_AAD_NAME">Microsoft® Azure® Active Directory®</ph> or enrolled in <ph name="CHROME_BROWSER_CLOUD_MANAGEMENT_NAME">Chrome Browser Cloud Management</ph>.
On <ph name="MS_WIN_NAME">Microsoft® Windows®</ph> instances, apps and extensions from outside the Chrome Web Store can only be forced installed if the instance is joined to a <ph name="MS_AD_NAME">Microsoft® Active Directory®</ph> domain, joined to <ph name="MS_AAD_NAME">Microsoft® Azure® Active Directory®</ph> or enrolled in <ph name="CHROME_ENTERPRISE_CORE_NAME">Chrome Enterprise Core</ph>.
On <ph name="MAC_OS_NAME">macOS</ph> instances, apps and extensions from outside the Chrome Web Store can only be force installed if the instance is managed via MDM, joined to a domain via MCX or enrolled in <ph name="CHROME_BROWSER_CLOUD_MANAGEMENT_NAME">Chrome Browser Cloud Management</ph>.
On <ph name="MAC_OS_NAME">macOS</ph> instances, apps and extensions from outside the Chrome Web Store can only be force installed if the instance is managed via MDM, joined to a domain via MCX or enrolled in <ph name="CHROME_ENTERPRISE_CORE_NAME">Chrome Enterprise Core</ph>.
example_value:
'*':
allowed_types:
tools/under-control/src/components/policy/resources/templates/policy_definitions/FirstPartySets/FirstPartySetsOverrides.yaml
+2 -2
View File
@@ -33,9 +33,9 @@ desc: |-
All sets provided by the policy must be valid First-Party Sets, if they aren't then an
appropriate error will be outputted.
On <ph name="MS_WIN_NAME">Microsoft® Windows®</ph>, this policy is only available on instances that are joined to a <ph name="MS_AD_NAME">Microsoft® Active Directory®</ph> domain, joined to <ph name="MS_AAD_NAME">Microsoft® Azure® Active Directory®</ph> or enrolled in <ph name="CHROME_BROWSER_CLOUD_MANAGEMENT_NAME">Chrome Browser Cloud Management</ph>.
On <ph name="MS_WIN_NAME">Microsoft® Windows®</ph>, this policy is only available on instances that are joined to a <ph name="MS_AD_NAME">Microsoft® Active Directory®</ph> domain, joined to <ph name="MS_AAD_NAME">Microsoft® Azure® Active Directory®</ph> or enrolled in <ph name="CHROME_ENTERPRISE_CORE_NAME">Chrome Enterprise Core</ph>.
On <ph name="MAC_OS_NAME">macOS</ph>, this policy is only available on instances that are managed via MDM, joined to a domain via MCX or enrolled in <ph name="CHROME_BROWSER_CLOUD_MANAGEMENT_NAME">Chrome Browser Cloud Management</ph>.
On <ph name="MAC_OS_NAME">macOS</ph>, this policy is only available on instances that are managed via MDM, joined to a domain via MCX or enrolled in <ph name="CHROME_ENTERPRISE_CORE_NAME">Chrome Enterprise Core</ph>.
This is the equivalent of the <ph name="RELATED_WEBSITE_SETS_OVERRIDES_POLICY_NAME">RelatedWebsiteSetsOverrides</ph> policy.
Either policy may be used, but this one will be deprecated soon so the <ph name="RELATED_WEBSITE_SETS_OVERRIDES_POLICY_NAME">RelatedWebsiteSetsOverrides</ph> policy is preferred.
tools/under-control/src/components/policy/resources/templates/policy_definitions/GenerativeAI/DevToolsGenAiSettings.yaml
+2 -1
View File
@@ -12,7 +12,8 @@ desc: |-
DevTools Generative AI features include:
- Console Insights: explains console messages and offers suggestions on how to fix console errors.
- AI assistance: helps users to understand CSS styles with AI-powered insights.
- AI assistance: get help with understanding CSS styles (since version 131), network requests, performance, and files (all since version 132).
default: 0
example_value: 2
features:
tools/under-control/src/components/policy/resources/templates/policy_definitions/GenerativeAI/GenAIPhotoEditingSettings.yaml
Executable
+40
View File
@@ -0,0 +1,40 @@
caption: Settings for Generative AI Photo Editing feature
desc: |-
This policy controls the settings of the Generative AI Photo Editing feature for <ph name="PRODUCT_OS_NAME">$1<ex>Google ChromeOS</ex></ph>.
0 = Enable the feature for users, and send relevant data to Google to help train or improve AI models. Relevant data may include prompts, inputs, outputs, and source materials, depending on the feature. It may be reviewed by humans for the sole purpose of improving AI models. 0 is the default value, except when noted below.
1 = Enable the feature for users, but do not send data to Google to train or improve AI models. 1 is the default value for Enterprise users managed by <ph name="GOOGLE_ADMIN_CONSOLE_PRODUCT_NAME">Google Admin console</ph> and for Education accounts managed by <ph name="GOOGLE_WORKSPACE_PRODUCT_NAME">Google Workspace</ph>.
2 = Disable the feature.
default: 0
example_value: 2
features:
# Policy changes do not require a browser restart. However, the new policy
# will be applied the next time users open a new photo, not immediately.
# It is because the user might be actively editing during policy update.
dynamic_refresh: true
per_profile: true
owners:
- file://chromeos/ash/components/mantis/OWNERS
items:
- caption: Allow Generative AI Photo Editing and improve AI models.
name: Allowed
value: 0
- caption: Allow Generative AI Photo Editing without improving AI models.
name: AllowedWithoutLogging
value: 1
- caption: Do not allow Generative AI Photo Editing.
name: Disabled
value: 2
schema:
enum:
- 0
- 1
- 2
type: integer
future_on:
- chrome_os
tags: []
type: int-enum
tools/under-control/src/components/policy/resources/templates/policy_definitions/Kiosk/DeviceLocalAccountAutoLoginDelay.yaml
-1
View File
@@ -12,7 +12,6 @@ features:
dynamic_refresh: true
owners:
- file://components/policy/OWNERS
- emaxx@chromium.org
schema:
type: integer
supported_on:
tools/under-control/src/components/policy/resources/templates/policy_definitions/Miscellaneous/AllowScreenLock.yaml
-1
View File
@@ -15,7 +15,6 @@ items:
value: false
owners:
- file://components/policy/OWNERS
- emaxx@chromium.org
schema:
type: boolean
supported_on:
tools/under-control/src/components/policy/resources/templates/policy_definitions/Miscellaneous/AllowedInputMethods.yaml
+1
View File
@@ -15,6 +15,7 @@ features:
per_profile: true
owners:
- hendrich@chromium.org
- poromov@chromium.org
schema:
items:
type: string
tools/under-control/src/components/policy/resources/templates/policy_definitions/Miscellaneous/AllowedInputMethodsForceEnabled.yaml
Executable
+26
View File
@@ -0,0 +1,26 @@
caption: Enforce all allowed input methods to be enabled in a user session
desc: |-
Setting the policy to true enforces all input methods from <ph name="ALLOWED_INPUT_METHODS_POLICY_NAME">AllowedInputMethods</ph> policy to be enabled in <ph name="PRODUCT_OS_NAME">$2<ex>Google ChromeOS</ex></ph> sessions.
No other input methods can be enabled in the user sessions.
Setting the policy to false or not setting it doesn't enforce any enabled input methods and <ph name="ALLOWED_INPUT_METHODS_POLICY_NAME">AllowedInputMethods</ph> policy only configures which input methods are available to the user.
If <ph name="ALLOWED_INPUT_METHODS_POLICY_NAME">AllowedInputMethods</ph> policy is unset or set to an empty list, this policy is ignored and users can enable any input methods.
device_only: false
example_value: true
features:
dynamic_refresh: true
per_profile: true
items:
- caption: Enforce all allowed input methods to be enabled
value: true
- caption: Do not enforce enabled input methods
value: false
owners:
- poromov@chromium.org
- hendrich@chromium.org
schema:
type: boolean
supported_on:
- chrome_os:133-
tags: []
type: main
tools/under-control/src/components/policy/resources/templates/policy_definitions/Miscellaneous/ArcVmDataMigrationStrategy.yaml
-1
View File
@@ -24,7 +24,6 @@ items:
value: 1
owners:
- youkichihosoi@chromium.org
- mhasank@chromium.org
- arc-commercial@google.com
schema:
enum:
tools/under-control/src/components/policy/resources/templates/policy_definitions/Miscellaneous/AttestationExtensionWhitelist.yaml
-1
View File
@@ -12,7 +12,6 @@ features:
dynamic_refresh: true
per_profile: true
owners:
- emaxx@chromium.org
- file://chrome/browser/extensions/api/enterprise_platform_keys/OWNERS
schema:
items:
tools/under-control/src/components/policy/resources/templates/policy_definitions/Miscellaneous/AutoOpenFileTypes.yaml
+1 -1
View File
@@ -6,7 +6,7 @@ desc: |-
If this policy isn't set, only file types that a user has already specified to automatically be opened will do so when downloaded.
On <ph name="MS_WIN_NAME">Microsoft® Windows®</ph>, this policy is only available on instances that are joined to a <ph name="MS_AD_NAME">Microsoft® Active Directory®</ph> domain, joined to <ph name="MS_AAD_NAME">Microsoft® Azure® Active Directory®</ph> or enrolled in <ph name="CHROME_BROWSER_CLOUD_MANAGEMENT_NAME">Chrome Browser Cloud Management</ph>.
On <ph name="MS_WIN_NAME">Microsoft® Windows®</ph>, this policy is only available on instances that are joined to a <ph name="MS_AD_NAME">Microsoft® Active Directory®</ph> domain, joined to <ph name="MS_AAD_NAME">Microsoft® Azure® Active Directory®</ph> or enrolled in <ph name="CHROME_ENTERPRISE_CORE_NAME">Chrome Enterprise Core</ph>.
example_value:
- exe
- txt
tools/under-control/src/components/policy/resources/templates/policy_definitions/Miscellaneous/BrowserGuestModeEnabled.yaml
+2 -5
View File
@@ -1,14 +1,12 @@
caption: Enable guest mode in browser
desc: |-
If this policy is set to true or not configured, <ph name="PRODUCT_NAME">$1<ex>Google Chrome</ex></ph> and <ph name="LACROS_NAME">Lacros</ph> will enable guest logins. Guest logins are <ph name="PRODUCT_NAME">$1<ex>Google Chrome</ex></ph> profiles where all windows are in incognito mode.
If this policy is set to Enabled or not configured, <ph name="PRODUCT_NAME">$1<ex>Google Chrome</ex></ph> will enable guest logins. Guest logins are <ph name="PRODUCT_NAME">$1<ex>Google Chrome</ex></ph> profiles where all windows are in incognito mode.
If this policy is set to false, <ph name="PRODUCT_NAME">$1<ex>Google Chrome</ex></ph> and <ph name="LACROS_NAME">Lacros</ph> will not allow guest profiles to be started.
If this policy is set to Disabled, <ph name="PRODUCT_NAME">$1<ex>Google Chrome</ex></ph> will not allow guest profiles to be started.
example_value: true
features:
dynamic_refresh: true
per_profile: false
future_on:
- fuchsia
items:
- caption: Allow guest browser logins
value: true
@@ -21,6 +19,5 @@ schema:
type: boolean
supported_on:
- chrome.*:38-
- chrome_os:100-
tags: []
type: main
tools/under-control/src/components/policy/resources/templates/policy_definitions/Miscellaneous/CSSCustomStateDeprecatedSyntaxEnabled.yaml
+5 -5
View File
@@ -26,11 +26,11 @@ owners:
schema:
type: boolean
supported_on:
- chrome.*:127-
- chrome_os:127-
- android:127-
- webview_android:127-
- chrome.*:127-132
- chrome_os:127-132
- android:127-132
- webview_android:127-132
tags: []
type: main
deprecated: false
deprecated: true
device_only: false
tools/under-control/src/components/policy/resources/templates/policy_definitions/Miscellaneous/ChromeCleanupEnabled.yaml
+1 -1
View File
@@ -6,7 +6,7 @@ desc: |-
Setting the policy to Disabled means Chrome Cleanup won't periodically scan and manual triggering is disabled.
On <ph name="MS_WIN_NAME">Microsoft® Windows®</ph>, this policy is only available on instances that are joined to a <ph name="MS_AD_NAME">Microsoft® Active Directory®</ph> domain, joined to <ph name="MS_AAD_NAME">Microsoft® Azure® Active Directory®</ph> or enrolled in <ph name="CHROME_BROWSER_CLOUD_MANAGEMENT_NAME">Chrome Browser Cloud Management</ph>.
On <ph name="MS_WIN_NAME">Microsoft® Windows®</ph>, this policy is only available on instances that are joined to a <ph name="MS_AD_NAME">Microsoft® Active Directory®</ph> domain, joined to <ph name="MS_AAD_NAME">Microsoft® Azure® Active Directory®</ph> or enrolled in <ph name="CHROME_ENTERPRISE_CORE_NAME">Chrome Enterprise Core</ph>.
example_value: true
features:
dynamic_refresh: false
tools/under-control/src/components/policy/resources/templates/policy_definitions/Miscellaneous/ChromeCleanupReportingEnabled.yaml
+1 -1
View File
@@ -8,7 +8,7 @@ desc: |-
Leaving the policy unset means <ph name="CHROME_CLEANUP_NAME">Chrome Cleanup</ph> may, in line with policy set by <ph name="SAFE_BROWSING_EXTENDED_REPORTING_ENABLED_POLICY_NAME">SafeBrowsingExtendedReportingEnabled</ph>, report about scans for detecting unwanted software to Google. <ph name="CHROME_CLEANUP_NAME">Chrome Cleanup</ph> asks users if they want the cleanup and to share the results with Google to help with future unwanted software detection. These results have file metadata, automatically installed extensions, and registry keys, as described by the Chrome Privacy Whitepaper.
On <ph name="MS_WIN_NAME">Microsoft® Windows®</ph>, this policy is only available on instances that are joined to a <ph name="MS_AD_NAME">Microsoft® Active Directory®</ph> domain, joined to <ph name="MS_AAD_NAME">Microsoft® Azure® Active Directory®</ph> or enrolled in <ph name="CHROME_BROWSER_CLOUD_MANAGEMENT_NAME">Chrome Browser Cloud Management</ph>.
On <ph name="MS_WIN_NAME">Microsoft® Windows®</ph>, this policy is only available on instances that are joined to a <ph name="MS_AD_NAME">Microsoft® Active Directory®</ph> domain, joined to <ph name="MS_AAD_NAME">Microsoft® Azure® Active Directory®</ph> or enrolled in <ph name="CHROME_ENTERPRISE_CORE_NAME">Chrome Enterprise Core</ph>.
example_value: true
features:
dynamic_refresh: true
tools/under-control/src/components/policy/resources/templates/policy_definitions/Miscellaneous/ChromeDataRegionSetting.yaml
+2
View File
@@ -37,5 +37,7 @@ schema:
future_on:
- chrome.*
- chrome_os
- ios
- android
tags: []
type: int-enum
tools/under-control/src/components/policy/resources/templates/policy_definitions/Miscellaneous/ClientCertificateManagementAllowed.yaml
-1
View File
@@ -20,7 +20,6 @@ items:
value: 2
owners:
- file://components/policy/OWNERS
- emaxx@chromium.org
schema:
enum:
- 0
tools/under-control/src/components/policy/resources/templates/policy_definitions/Miscellaneous/CloudManagementEnrollmentMandatory.yaml
+3 -3
View File
@@ -1,10 +1,10 @@
caption: Enable mandatory cloud management enrollment
desc: |-
Setting the policy to Enabled mandates <ph name="CHROME_BROWSER_CLOUD_MANAGEMENT_NAME">Chrome Browser Cloud Management</ph> enrollment and blocks <ph name="PRODUCT_NAME">$1<ex>Google Chrome</ex></ph> launch process if failed.
Setting the policy to Enabled mandates <ph name="CHROME_ENTERPRISE_CORE_NAME">Chrome Enterprise Core</ph> browser enrollment and blocks <ph name="PRODUCT_NAME">$1<ex>Google Chrome</ex></ph> launch process if failed.
Setting the policy to Disabled or leaving it unset renders <ph name="CHROME_BROWSER_CLOUD_MANAGEMENT_NAME">Chrome Browser Cloud Management</ph> optional and doesn't block <ph name="PRODUCT_NAME">$1<ex>Google Chrome</ex></ph> launch process if failed.
Setting the policy to Disabled or leaving it unset renders <ph name="CHROME_ENTERPRISE_CORE_NAME">Chrome Enterprise Core</ph> browser enrollment optional and doesn't block <ph name="PRODUCT_NAME">$1<ex>Google Chrome</ex></ph> launch process if failed.
Machine scope cloud policy enrollment on desktop uses this policy. See https://support.google.com/chrome/a/answer/9301891?ref_topic=9301744 for details.
Machine scope cloud policy enrollment on desktop uses this policy. See https://support.google.com/chrome/a/answer/9301891 for details.
example_value: true
features:
dynamic_refresh: false
tools/under-control/src/components/policy/resources/templates/policy_definitions/Miscellaneous/CloudManagementEnrollmentToken.yaml
+2 -2
View File
@@ -1,8 +1,8 @@
caption: The enrollment token of cloud policy
desc: |-
Setting the policy means <ph name="PRODUCT_NAME">$1<ex>Google Chrome</ex></ph> tries to register itself with <ph name="CHROME_BROWSER_CLOUD_MANAGEMENT_NAME">Chrome Browser Cloud Management</ph>. The value of this policy is an enrollment token you can retrieve from the <ph name="GOOGLE_ADMIN_CONSOLE_PRODUCT_NAME">Google Admin console</ph>.
Setting the policy means <ph name="PRODUCT_NAME">$1<ex>Google Chrome</ex></ph> tries to register itself with <ph name="CHROME_ENTERPRISE_CORE_NAME">Chrome Enterprise Core</ph> browser management. The value of this policy is an enrollment token you can retrieve from the <ph name="GOOGLE_ADMIN_CONSOLE_PRODUCT_NAME">Google Admin console</ph>.
See https://support.google.com/chrome/a/answer/9301891?ref_topic=9301744 for details.
See https://support.google.com/chrome/a/answer/9301891 for details.
example_value: 37185d02-e055-11e7-80c1-9a214cf093ae
features:
dynamic_refresh: false
tools/under-control/src/components/policy/resources/templates/policy_definitions/Miscellaneous/CloudPolicyOverridesPlatformPolicy.yaml
+4 -3
View File
@@ -3,11 +3,12 @@ caption: <ph name="PRODUCT_NAME">$1<ex>Google Chrome</ex></ph> cloud policy over
desc: |-
Setting the policy to Enabled means cloud policy takes precedence if it conflicts with platform policy.
Setting the policy to Disabled or leaving it unset means platform policy takes precedence if it conflicts with cloud policy.
Setting the policy to Disabled or leaving it unset means platform policy takes precedence if it conflicts with cloud policy.
This mandatory policy affects machine scope cloud policies.
This mandatory policy affects machine scope cloud policies.
This policy is only available on <ph name="PRODUCT_NAME">$1<ex>Google Chrome</ex></ph>; it has no effect on <ph name="GOOGLE_UPDATE_NAME">Google Update</ph>.
This policy is specific to <ph name="PRODUCT_NAME">$1<ex>Google Chrome</ex></ph> and does not affect <ph name="GOOGLE_UPDATE_NAME">Google Update</ph> because they are independent applications.
<ph name="GOOGLE_UPDATE_NAME">Google Update</ph> has a separate policy with the same name.
example_value: false
features:
dynamic_refresh: true
tools/under-control/src/components/policy/resources/templates/policy_definitions/Miscellaneous/CloudUserPolicyMerge.yaml
+4 -4
View File
@@ -1,13 +1,13 @@
caption: Enables merging of user cloud policies into machine-level policies
default: false
desc: |-
Setting the policy to Enabled allows policies associated with a <ph name="GOOGLE_WORKSPACE_PRODUCT_NAME">Google Workspace</ph> account to be merged into machine-level policies.
Setting the policy to Enabled allows policies associated with a managed account to be merged into machine-level policies.
Only policies originating from secure users can be merged. A secure user is affiliated with the organization that manages their browser using <ph name="CHROME_BROWSER_CLOUD_MANAGEMENT_NAME">Chrome Browser Cloud Management</ph>. All other user-level policies will always be ignored.
Setting the policy to Disabled or leaving it unset prevents user-level cloud policies from being merged with policies from any other sources.
Policies that need to be merged also need to be set in either <ph name="POLICY_POLICYLISTMULTIPLESOURCEMERGELIST">PolicyListMultipleSourceMergeList</ph> or <ph name="POLICY_POLICYDICTIONARYMULTIPLESOURCEMERGELIST">PolicyDictionaryMultipleSourceMergeList</ph>. This policy will be ignored if neither of the two aforementioned policies is configured.
Only policies originating from secure users can take precedence. A secure user is affiliated with the organization that manages their browser using <ph name="CHROME_ENTERPRISE_CORE_NAME">Chrome Enterprise Core</ph>. All other user-level policies will have default precedence.
Leaving the policy unset or setting it to Disabled prevents user-level cloud policies from being merged with policies from any other sources.
Policies that need to be merged also need to be set in either <ph name="POLICY_LIST_MULTIPLE_SOURCE_MERGE_LIST_POLICY_NAME">PolicyListMultipleSourceMergeList</ph> or <ph name="POLICY_DICTIONARY_MULTIPLE_SOURCE_MERGE_LIST_POLICY_NAME">PolicyDictionaryMultipleSourceMergeList</ph>. This policy will be ignored if neither of the two aforementioned policies is configured.
example_value: true
features:
dynamic_refresh: true
tools/under-control/src/components/policy/resources/templates/policy_definitions/Miscellaneous/CloudUserPolicyOverridesCloudMachinePolicy.yaml
+4 -4
View File
@@ -2,13 +2,13 @@ caption: Allow user cloud policies to override <ph name="CHROME_BROWSER_CLOUD_MA
Browser Cloud Management</ph> policies.
default: false
desc: |-
Setting the policy to Enabled allows policies associated with a <ph name="GOOGLE_WORKSPACE_PRODUCT_NAME">Google Workspace</ph> account to take precedence if they conflict with <ph name="CHROME_BROWSER_CLOUD_MANAGEMENT_NAME">Chrome Browser Cloud Management</ph> policies.
Setting the policy to Enabled allows policies associated with a managed account to take precedence if they conflict with <ph name="CHROME_ENTERPRISE_CORE_NAME">Chrome Enterprise Core</ph> browser policies.
Only policies originating from secure users can take precedence. A secure user is affiliated with the organization that manages their browser using <ph name="CHROME_BROWSER_CLOUD_MANAGEMENT_NAME">Chrome Browser Cloud Management</ph>. All other user-level policies will have default precedence.
Setting the policy to Disabled or leaving it unset causes user-level cloud policies to have default priority.
The policy can be combined with <ph name="POLICY_CLOUDPOLICYOVERRIDESPLATFORMPOLICY">CloudPolicyOverridesPlatformPolicy</ph>. If both policies are enabled, user cloud policies will also take precedence over conflicting platform policies.
Only policies originating from secure users can take precedence. A secure user is affiliated with the organization that manages their browser using <ph name="CHROME_ENTERPRISE_CORE_NAME">Chrome Enterprise Core</ph>. All other user-level policies will have default precedence.
Leaving the policy unset or setting it to disabled causes user-level cloud policies to have default priority.
The policy can be combined with <ph name="POLICY_CLOUD_POLICY_OVERRIDES_PLATFORM_POLICY_POLICY_NAME">CloudPolicyOverridesPlatformPolicy</ph>. If both policies are enabled, user cloud policies will also take precedence over conflicting platform policies.
example_value: false
features:
dynamic_refresh: true
tools/under-control/src/components/policy/resources/templates/policy_definitions/Miscellaneous/CommandLineFlagSecurityWarningsEnabled.yaml
+2 -2
View File
@@ -5,9 +5,9 @@ desc: |-
Setting the policy to Disabled prevents security warnings from appearing when Chrome is launched with potentially dangerous command-line flags.
On <ph name="MS_WIN_NAME">Microsoft® Windows®</ph>, this policy is only available on instances that are joined to a <ph name="MS_AD_NAME">Microsoft® Active Directory®</ph> domain, joined to <ph name="MS_AAD_NAME">Microsoft® Azure® Active Directory®</ph> or enrolled in <ph name="CHROME_BROWSER_CLOUD_MANAGEMENT_NAME">Chrome Browser Cloud Management</ph>.
On <ph name="MS_WIN_NAME">Microsoft® Windows®</ph>, this policy is only available on instances that are joined to a <ph name="MS_AD_NAME">Microsoft® Active Directory®</ph> domain, joined to <ph name="MS_AAD_NAME">Microsoft® Azure® Active Directory®</ph> or enrolled in <ph name="CHROME_ENTERPRISE_CORE_NAME">Chrome Enterprise Core</ph>.
On <ph name="MAC_OS_NAME">macOS</ph>, this policy is only available on instances that are managed via MDM, joined to a domain via MCX or enrolled in <ph name="CHROME_BROWSER_CLOUD_MANAGEMENT_NAME">Chrome Browser Cloud Management</ph>.
On <ph name="MAC_OS_NAME">macOS</ph>, this policy is only available on instances that are managed via MDM, joined to a domain via MCX or enrolled in <ph name="CHROME_ENTERPRISE_CORE_NAME">Chrome Enterprise Core</ph>.
example_value: true
features:
dynamic_refresh: false
tools/under-control/src/components/policy/resources/templates/policy_definitions/Miscellaneous/ContextualSuggestionsEnabled.yaml
-1
View File
@@ -11,7 +11,6 @@ features:
per_profile: true
owners:
- file://components/policy/OWNERS
- emaxx@chromium.org
schema:
type: boolean
supported_on:
tools/under-control/src/components/policy/resources/templates/policy_definitions/Miscellaneous/DeviceLoginScreenPrimaryMouseButtonSwitch.yaml
+1 -2
View File
@@ -23,8 +23,7 @@ items:
- caption: Allow the user to decide
value: null
owners:
- amraboelkher@chromium.org
- emaxx@chromium.org
- file://components/policy/OWNERS
schema:
type: boolean
supported_on:
tools/under-control/src/components/policy/resources/templates/policy_definitions/Miscellaneous/DeviceLoginScreenWebUILazyLoading.yaml
-33
View File
@@ -1,33 +0,0 @@
caption: Load Login WebUI only when needed.
default: false
desc: |-
This policy controls whether the WebUI part of the sign-in screen will be always loaded at start or only before showing it. This policy applies to the sign-in screen.
If this policy is enabled, the WebUI part of the sign-in UI will be loaded only before showing it. This speeds up the login process.
If this policy is disabled, the WebUI part of the sign-in screen will always be loaded on boot (legacy behavior).
If unset, behavior will be controlled by kEnableLazyLoginWebUILoading feature.
This policy should be removed after kEnableLazyLoginWebUILoading is fully rolled out.
device_only: true
example_value: true
features:
dynamic_refresh: false
per_profile: false
future_on:
- chrome_os
items:
- caption: Enable Lazy Login WebUI loading.
value: true
- caption: Disable Lazy Login WebUI loading.
value: false
owners:
- alemate@chromium.org
- rsorokin@chromium.org
- antrim@chromium.org
schema:
type: boolean
tags: []
type: main
generate_device_proto: False
tools/under-control/src/components/policy/resources/templates/policy_definitions/Miscellaneous/DeviceNativeClientForceAllowed.yaml
+1 -1
View File
@@ -1,5 +1,5 @@
caption: Forces Native Client (NaCl) to be allowed to run on <ph name="PRODUCT_OS_NAME">$2<ex>Google ChromeOS</ex></ph>.
default: true
default: false
desc: |-
Setting the policy to True allows Native Client to continue to run even if the default behavior is that Native Client is disabled.
Setting the policy to False or leaving it unset will use the default behavior.
tools/under-control/src/components/policy/resources/templates/policy_definitions/Miscellaneous/DevicePowerwashAllowed.yaml
-1
View File
@@ -15,7 +15,6 @@ items:
value: false
owners:
- file://components/policy/OWNERS
- emaxx@chromium.org
schema:
type: boolean
supported_on:
tools/under-control/src/components/policy/resources/templates/policy_definitions/Miscellaneous/DnsOverHttpsMode.yaml
+17 -6
View File
@@ -1,17 +1,28 @@
caption: Controls the mode of DNS-over-HTTPS
default_for_enterprise_users: 'off'
desc: |-
Controls the mode of the DNS-over-HTTPS resolver. Please note that this policy will only set the default mode for each query. The mode may be overridden for special types of queries such as requests to resolve a DNS-over-HTTPS server hostname.
Controls the mode of the DNS-over-HTTPS resolver. Please note that this
policy will only set the default mode for each query. The mode may be
overridden for special types of queries such as requests to resolve a
DNS-over-HTTPS server hostname.
The <ph name="SECURE_DNS_MODE_OFF">"off"</ph> mode will disable DNS-over-HTTPS.
The <ph name="SECURE_DNS_MODE_OFF">"off"</ph> mode will disable
DNS-over-HTTPS.
The <ph name="SECURE_DNS_MODE_AUTOMATIC">"automatic"</ph> mode will send DNS-over-HTTPS queries first if a DNS-over-HTTPS server is available and may fallback to sending insecure queries on error.
The <ph name="SECURE_DNS_MODE_AUTOMATIC">"automatic"</ph> mode will send
DNS-over-HTTPS queries first if a DNS-over-HTTPS server is available and
may fallback to sending insecure queries on error.
The <ph name="SECURE_DNS_MODE_SECURE">"secure"</ph> mode will only send DNS-over-HTTPS queries and will fail to resolve on error.
The <ph name="SECURE_DNS_MODE_SECURE">"secure"</ph> mode will only send
DNS-over-HTTPS queries and will fail to resolve on error.
On <ph name="ANDROID_VERSION">Android Pie</ph> and above, if DNS-over-TLS is active, <ph name="PRODUCT_NAME">$1<ex>Google Chrome</ex></ph> will not send insecure DNS requests.
On <ph name="ANDROID_VERSION">Android Pie</ph> and above, if DNS-over-TLS
is active, <ph name="PRODUCT_NAME">$1<ex>Google Chrome</ex></ph> will not
send insecure DNS requests.
If this policy is unset the browser may send DNS-over-HTTPS requests to a resolver associated with the user's configured system resolver.
If this policy is unset, for managed devices DNS-over-HTTPS queries will not
be sent. Otherwise, the browser may send DNS-over-HTTPS requests to a
resolver associated with the user's configured system resolver.
example_value: 'off'
features:
dynamic_refresh: true
tools/under-control/src/components/policy/resources/templates/policy_definitions/Miscellaneous/EnableDeprecatedWebBasedSignin.yaml
-1
View File
@@ -14,7 +14,6 @@ features:
per_profile: false
owners:
- file://components/policy/OWNERS
- emaxx@chromium.org
schema:
type: boolean
supported_on:
tools/under-control/src/components/policy/resources/templates/policy_definitions/Miscellaneous/EnterpriseLogoUrl.yaml
+1 -1
View File
@@ -5,7 +5,7 @@ desc: |-
This policy can only be set as a user policy.
It is recommended to use the favicon (example https://www.google.com/favicon.ico) or an icon no smaller than 24 x 24 px.
It is recommended to use the favicon (example https://www.google.com/favicon.ico) or an icon no smaller than 48 x 48 px.
example_value: https://example.com/image.png
features:
dynamic_refresh: true
tools/under-control/src/components/policy/resources/templates/policy_definitions/Miscellaneous/EnterpriseSearchAggregatorSettings.yaml
+2 -2
View File
@@ -14,9 +14,9 @@ desc: |-
The <ph name="ICON_URL_SEARCH_AGGREGATOR_SETTINGS_FIELD">icon_url</ph> field specifies the URL to an image that will be used on the search suggestions. A default icon will be used when this field is not set. It's recommended to use a favicon (example <ph name="ICON_URL_EXAMPLE">https://www.google.com/favicon.ico</ph>).
On <ph name="MS_WIN_NAME">Microsoft® Windows®</ph>, this policy is only available on instances that are joined to a <ph name="MS_AD_NAME">Microsoft® Active Directory®</ph> domain, joined to <ph name="MS_AAD_NAME">Microsoft® Azure® Active Directory®</ph> or enrolled in <ph name="CHROME_BROWSER_CLOUD_MANAGEMENT_NAME">Chrome Browser Cloud Management</ph>.
On <ph name="MS_WIN_NAME">Microsoft® Windows®</ph>, this policy is only available on instances that are joined to a <ph name="MS_AD_NAME">Microsoft® Active Directory®</ph> domain, joined to <ph name="MS_AAD_NAME">Microsoft® Azure® Active Directory®</ph> or enrolled in <ph name="CHROME_ENTERPRISE_CORE_NAME">Chrome Enterprise Core</ph>.
On <ph name="MAC_OS_NAME">macOS</ph>, this policy is only available on instances that are managed via MDM, joined to a domain via MCX or enrolled in <ph name="CHROME_BROWSER_CLOUD_MANAGEMENT_NAME">Chrome Browser Cloud Management</ph>.
On <ph name="MAC_OS_NAME">macOS</ph>, this policy is only available on instances that are managed via MDM, joined to a domain via MCX or enrolled in <ph name="CHROME_ENTERPRISE_CORE_NAME">Chrome Enterprise Core</ph>.
example_value:
name: My Search Aggregator
tools/under-control/src/components/policy/resources/templates/policy_definitions/Miscellaneous/FilePickerChooseFromDriveSettings.yaml
Executable
+33
View File
@@ -0,0 +1,33 @@
caption: Allow choosing files directly from <ph name="GOOGLE_DRIVE_NAME">Google Drive</ph>
default: 0
desc: This policy controls whether the user is allowed to choose files from <ph name="GOOGLE_DRIVE_NAME">Google Drive</ph>
directly when a website contains a form where files can be submitted.
Setting the policy to "Show <ph name="GOOGLE_DRIVE_NAME">Google Drive</ph> option." (0) or not setting the policy allows the user to choose files from <ph name="GOOGLE_DRIVE_NAME">Google Drive</ph> in the file selection menu.
Setting the policy to "Hide <ph name="GOOGLE_DRIVE_NAME">Google Drive</ph> option." (1) hides the <ph name="GOOGLE_DRIVE_NAME">Google Drive</ph> option in the file selection menu.
This policy does not prevent users from choosing files from <ph name="GOOGLE_DRIVE_NAME">Google Drive</ph> using other ways beside the 'Google Drive' action in the file selection menu.
example_value: 0
features:
dynamic_refresh: true
per_profile: true
items:
- caption: Show <ph name="GOOGLE_DRIVE_NAME">Google Drive</ph> option.
name: Enabled
value: 0
- caption: Hide <ph name="GOOGLE_DRIVE_NAME">Google Drive</ph> option.
name: Disabled
value: 1
owners:
- qpubert@google.com
- olivierrobin@google.com
schema:
enum:
- 0
- 1
type: integer
supported_on:
- ios:133-
tags: []
type: int-enum
tools/under-control/src/components/policy/resources/templates/policy_definitions/Miscellaneous/IncognitoModeAvailability.yaml
-1
View File
@@ -31,7 +31,6 @@ items:
value: 2
owners:
- file://components/policy/OWNERS
- emaxx@chromium.org
schema:
enum:
- 0
tools/under-control/src/components/policy/resources/templates/policy_definitions/Miscellaneous/IsolatedWebAppInstallForceList.yaml
+12 -3
View File
@@ -6,13 +6,16 @@ desc: |-
Each list item of the policy is an object which has two mandatory fields: the update manifest <ph name="URL_LABEL">URL</ph> and Web Bundle ID of the Isolated Web App.
Each item can also have optional fields: an IWA release/update channel name (update_channel) and a specific version to pin (pinned_version).
If the "update_channel" is not set, then the value of "default" will be used. When the pinned_version is specified, the system will attempt to install that specific version (if available on the current update channel).
By default, version pinning does not allow going back to older versions. Pinning an IWA to a specific version prevents it from being updated beyond that version. To unpin, remove this field.
Each item can also include these optional fields:
* <ph name="UPDATE_CHANNEL_OPTION">update_channel</ph>: The IWA release/update channel name. If not set, "default" is used.
* <ph name="PINNED_VERSION_OPTION">pinned_version</ph>: A specific version to install. The system will attempt to install this version if available on the specified update channel. By default, pinning an IWA to a specific version prevents it from being updated beyond that version. To unpin, remove this field.
* <ph name="ALLOW_DOWNGRADES_OPTION">allow_downgrades</ph>:: Enables installing older versions of the IWA. This requires the `pinned_version` field to be set. If not provided or set to <ph name="FALSE">false</ph> downgrading is disabled for that IWA.
example_value:
- update_manifest_url: https://example.com/isolated_web_app/update_manifest.json
web_bundle_id: aerugqztij5biqquuk3mfwpsaibuegaqcitgfchwuosuofdjabzqaaic
update_channel: beta
allow_downgrades: true
pinned_version: 1.2.3
features:
dynamic_refresh: true
@@ -36,6 +39,12 @@ schema:
The name of the IWA's update/release channel. This value can be any string;
no restrictions are imposed. If no value is provided, the "default"
channel will be used.
allow_downgrades:
type: boolean
description: >-
Enables the downgrading feature for IWAs. By default, only newer versions of IWAs are installed. When set to <ph name="TRUE">true</ph>, this allows you to install older versions as well.
To enable downgrading, the desired version value must be specified by using the `pinned_version` field.
If `allow_downgrades` is not provided or is set to <ph name="FALSE">false</ph>, downgrading is disabled for that IWA.
pinned_version:
type: string
description: >-
tools/under-control/src/components/policy/resources/templates/policy_definitions/Miscellaneous/LacrosAvailability.yaml
+2 -1
View File
@@ -48,6 +48,7 @@ schema:
- lacros_only
type: string
supported_on:
- chrome_os:92-
- chrome_os:92-130
tags: []
type: string-enum
deprecated: true
tools/under-control/src/components/policy/resources/templates/policy_definitions/Miscellaneous/LacrosSelection.yaml
+2 -1
View File
@@ -50,6 +50,7 @@ schema:
- rootfs
type: string
supported_on:
- chrome_os:112-
- chrome_os:112-130
tags: []
type: string-enum
deprecated: true
tools/under-control/src/components/policy/resources/templates/policy_definitions/Miscellaneous/MetricsReportingEnabled.yaml
+2 -2
View File
@@ -7,9 +7,9 @@ desc: |-
When this policy is not set, users can choose the anonymous reporting behavior at installation or first run, and can change this setting later.
On <ph name="MS_WIN_NAME">Microsoft® Windows®</ph>, this policy is only available on instances that are joined to a <ph name="MS_AD_NAME">Microsoft® Active Directory®</ph> domain, joined to <ph name="MS_AAD_NAME">Microsoft® Azure® Active Directory®</ph> or enrolled in <ph name="CHROME_BROWSER_CLOUD_MANAGEMENT_NAME">Chrome Browser Cloud Management</ph>.
On <ph name="MS_WIN_NAME">Microsoft® Windows®</ph>, this policy is only available on instances that are joined to a <ph name="MS_AD_NAME">Microsoft® Active Directory®</ph> domain, joined to <ph name="MS_AAD_NAME">Microsoft® Azure® Active Directory®</ph> or enrolled in <ph name="CHROME_ENTERPRISE_CORE_NAME">Chrome Enterprise Core</ph>.
On <ph name="MAC_OS_NAME">macOS</ph>, this policy is only available on instances that are managed via MDM, joined to a domain via MCX or enrolled in <ph name="CHROME_BROWSER_CLOUD_MANAGEMENT_NAME">Chrome Browser Cloud Management</ph>.
On <ph name="MAC_OS_NAME">macOS</ph>, this policy is only available on instances that are managed via MDM, joined to a domain via MCX or enrolled in <ph name="CHROME_ENTERPRISE_CORE_NAME">Chrome Enterprise Core</ph>.
(For <ph name="PRODUCT_OS_NAME">$2<ex>Google ChromeOS</ex></ph>, see <ph name="DEVICE_METRICS_REPORTING_ENABLED_POLICY_NAME">DeviceMetricsReportingEnabled</ph>.)
example_value: true
tools/under-control/src/components/policy/resources/templates/policy_definitions/Miscellaneous/PrimaryMouseButtonSwitch.yaml
+1 -2
View File
@@ -23,8 +23,7 @@ items:
- caption: Allow the user to decide
value: null
owners:
- amraboelkher@chromium.org
- emaxx@chromium.org
- file://components/policy/OWNERS
schema:
type: boolean
supported_on:
tools/under-control/src/components/policy/resources/templates/policy_definitions/Miscellaneous/PromptOnMultipleMatchingCertificates.yaml
-1
View File
@@ -17,7 +17,6 @@ items:
- caption: Only prompt the user when no certificate matches the auto-selection.
value: false
owners:
- emaxx@chromium.org
- miersh@google.com
schema:
type: boolean
tools/under-control/src/components/policy/resources/templates/policy_definitions/Miscellaneous/ProxySettings.yaml
+23 -15
View File
@@ -5,25 +5,33 @@ caption: Proxy settings
desc: |-
Setting the policy configures the proxy settings for Chrome and ARC-apps, which ignore all proxy-related options specified from the command line.
Leaving the policy unset lets users choose their proxy settings.
Leaving the policy unset lets users choose their proxy settings.
Setting the <ph name="PROXY_SETTINGS_POLICY_NAME">ProxySettings</ph> policy accepts the following fields:
* <ph name="PROXY_MODE_PROXY_SETTINGS_FIELD">ProxyMode</ph>, which lets you specify the proxy server Chrome uses and prevents users from changing proxy settings
* <ph name="PROXY_PAC_URL_PROXY_SETTINGS_FIELD">ProxyPacUrl</ph>, a URL to a proxy .pac file, or a PAC script encoded as a data URL with MIME type application/x-ns-proxy-autoconfig
* <ph name="PROXY_PAC_MANDATORY_PROXY_SETTINGS_FIELD">ProxyPacMandatory</ph>, which prevents the network stack from falling back to direct connections with invalid or unavailable PAC script
* <ph name="PROXY_SERVER_PROXY_SETTINGS_FIELD">ProxyServer</ph>, a URL of the proxy server
* <ph name="PROXY_BYPASS_LIST_PROXY_SETTINGS_FIELD">ProxyBypassList</ph>, a list of hosts for which the proxy will be bypassed
Setting the <ph name="PROXY_SETTINGS_POLICY_NAME">ProxySettings</ph> policy accepts the following fields:
The <ph name="PROXY_SERVER_MODE_PROXY_SETTINGS_FIELD">ProxyServerMode</ph> field is deprecated in favor of the <ph name="PROXY_MODE_PROXY_SETTINGS_FIELD">ProxyMode</ph> field.
* <ph name="PROXY_MODE_PROXY_SETTINGS_FIELD">ProxyMode</ph>, which lets you specify the proxy server Chrome uses and prevents users from changing proxy settings
For <ph name="PROXY_MODE_PROXY_SETTINGS_FIELD">ProxyMode</ph>, if you choose the value:
* <ph name="PROXY_MODE_ENUM_DIRECT">direct</ph>, a proxy is never used and all other fields are ignored.
* <ph name="PROXY_MODE_ENUM_SYSTEM">system</ph>, the systems's proxy is used and all other fields are ignored.
* <ph name="PROXY_MODE_ENUM_AUTO_DETECT">auto_detect</ph>, all other fields are ignored.
* <ph name="PROXY_MODE_ENUM_FIXED_SERVERS">fixed_servers</ph>, the <ph name="PROXY_SERVER_PROXY_SETTINGS_FIELD">ProxyServer</ph> and <ph name="PROXY_BYPASS_LIST_PROXY_SETTINGS_FIELD">ProxyBypassList</ph> fields are used.
* <ph name="PROXY_MODE_ENUM_PAC_SCRIPT">pac_script</ph>, the <ph name="PROXY_BYPASS_LIST_PROXY_PAC_URL">ProxyPacUrl</ph>, <ph name="PROXY_PAC_MANDATORY_PROXY_SETTINGS_FIELD">ProxyPacMandatory</ph> and <ph name="PROXY_BYPASS_LIST_PROXY_SETTINGS_FIELD">ProxyBypassList</ph> fields are used.
* <ph name="PROXY_PAC_URL_PROXY_SETTINGS_FIELD">ProxyPacUrl</ph>, a URL to a proxy .pac file, or a PAC script encoded as a data URL with MIME type application/x-ns-proxy-autoconfig
Note: For more detailed examples, visit The Chromium Projects ( https://www.chromium.org/developers/design-documents/network-settings#TOC-Command-line-options-for-proxy-sett ).
* <ph name="PROXY_PAC_MANDATORY_PROXY_SETTINGS_FIELD">ProxyPacMandatory</ph>, which prevents the network stack from falling back to direct connections with invalid or unavailable PAC script
* <ph name="PROXY_SERVER_PROXY_SETTINGS_FIELD">ProxyServer</ph>, a URL of the proxy server
* <ph name="PROXY_BYPASS_LIST_PROXY_SETTINGS_FIELD">ProxyBypassList</ph>, a list of hosts for which the proxy will be bypassed
The <ph name="PROXY_SERVER_MODE_PROXY_SETTINGS_FIELD">ProxyServerMode</ph> field is deprecated in favor of the <ph name="PROXY_MODE_PROXY_SETTINGS_FIELD">ProxyMode</ph> field. For <ph name="PROXY_MODE_PROXY_SETTINGS_FIELD">ProxyMode</ph>, if you choose the value:
* <ph name="PROXY_MODE_ENUM_DIRECT">direct</ph>, a proxy is never used and all other fields are ignored.
* <ph name="PROXY_MODE_ENUM_SYSTEM">system</ph>, the systems's proxy is used and all other fields are ignored.
* <ph name="PROXY_MODE_ENUM_AUTO_DETECT">auto_detect</ph>, all other fields are ignored.
* <ph name="PROXY_MODE_ENUM_FIXED_SERVERS">fixed_servers</ph>, the <ph name="PROXY_SERVER_PROXY_SETTINGS_FIELD">ProxyServer</ph> and <ph name="PROXY_BYPASS_LIST_PROXY_SETTINGS_FIELD">ProxyBypassList</ph> fields are used.
* <ph name="PROXY_MODE_ENUM_PAC_SCRIPT">pac_script</ph>, the <ph name="PROXY_BYPASS_LIST_PROXY_PAC_URL">ProxyPacUrl</ph>, <ph name="PROXY_PAC_MANDATORY_PROXY_SETTINGS_FIELD">ProxyPacMandatory</ph> and <ph name="PROXY_BYPASS_LIST_PROXY_SETTINGS_FIELD">ProxyBypassList</ph> fields are used.
Note: For more detailed examples, visit The Chromium Projects ( https://www.chromium.org/developers/design-documents/network-settings/#command-line-options-for-proxy-settings ).
example_value:
ProxyBypassList: https://www.example1.com,https://www.example2.com,https://internalsite/
ProxyMode: fixed_servers
tools/under-control/src/components/policy/resources/templates/policy_definitions/Miscellaneous/SafeBrowsingForTrustedSourcesEnabled.yaml
+1 -1
View File
@@ -7,7 +7,7 @@ desc: |-
These restrictions apply to downloads triggered from webpage content, as well as the Download link menu option. These restrictions don't apply to the save or download of the currently displayed page or to saving as PDF from the printing options.
On <ph name="MS_WIN_NAME">Microsoft® Windows®</ph>, this policy is only available on instances that are joined to a <ph name="MS_AD_NAME">Microsoft® Active Directory®</ph> domain, joined to <ph name="MS_AAD_NAME">Microsoft® Azure® Active Directory®</ph> or enrolled in <ph name="CHROME_BROWSER_CLOUD_MANAGEMENT_NAME">Chrome Browser Cloud Management</ph>.
On <ph name="MS_WIN_NAME">Microsoft® Windows®</ph>, this policy is only available on instances that are joined to a <ph name="MS_AD_NAME">Microsoft® Active Directory®</ph> domain, joined to <ph name="MS_AAD_NAME">Microsoft® Azure® Active Directory®</ph> or enrolled in <ph name="CHROME_ENTERPRISE_CORE_NAME">Chrome Enterprise Core</ph>.
example_value: false
features:
dynamic_refresh: true

Some files were not shown because too many files have changed in this diff Show More