proxy extensions who use "<all_permissions>" permission can take screenshots. about chrome.docs HOT 7 OPEN

sorry, i meant <all_urls> - of course.

from chrome.docs.

i'll quote it:

You can use most chrome.tabs methods and events without declaring any permissions in the
extension's manifest file. However, if you require access to the url, title, or favIconUrl properties of
tabs.Tab, you must declare the "tabs" permission in the manifest, as shown below:

and then:

captureVisibleTab

chrome.tabs.captureVisibleTab(integer windowId, object options, function callback)
Captures the visible area of the currently active tab in the specified window. You must have
<all_urls> permission to use this method.

from chrome.docs.

to be honest i would think it better if this API (captureVisibleTab) became explicit opt-in, and that's for the browser too. why couldn't google use the same API? it should be in big red bold letters.

from chrome.docs.

that's the approach Apple takes by the way, at least for location and so on. i think Steve Jobs mentioned it in a video before. i can dig it up if you're interested.

from chrome.docs.

Can you provide a link to the document you're quoting from?

from chrome.docs.

https://developer.chrome.com/extensions/tabs#method-captureVisibleTab

from chrome.docs.

any update on this? should that function have its own permission? (<capture_visible_tab> or something?).

from chrome.docs.