59

I am trying to understand the working of Google chrome extensions. I was studying the manifest.json file where I came across the permissions "http://*/*", "https://*/*" and "<all_urls>"

Can anybody explain what do these permissions mean?

TheRookierLearner
  • 3,073
  • 8
  • 32
  • 50

1 Answers1

117
  • "<all_urls>": matches any URL that starts with a permitted scheme (http:, https:, file:, or ftp:).
  • "http://*/*": Matches any URL that uses the http: scheme.
  • "https://*/*": Matches any URL that uses the https: scheme.
  • "*://*/*": Matches any URL that uses the https: or http: scheme.

These permissions are required if your Chrome extension wants to interact with the code running on pages.

Match patterns documentation

zcoop98
  • 2,322
  • 1
  • 16
  • 27
PSL
  • 122,084
  • 19
  • 250
  • 241
  • 4
    *b.t.w.*, although the *manifest.json* should be Unicode-encoded, I've seen a lot of extensions escaping the ``, to their's equivalent Unicode-format of `"\u003Call\u005Furls\u003E"`. I've asked around, and apparently some developers have used validation mechanism, which then validated the JSON "invalid" because of those characters. *Just in-case you were wondering..*. –  May 11 '15 at 16:41
  • 3
    Testing this in Chrome 43, I don't believe matches "chrome-extension" any more (if it ever did). Also, see documentation for supported formats: https://developer.chrome.com/extensions/match_patterns – deadbeef404 May 29 '15 at 04:52