bitwarden/browser
1
0
Fork 0
mirror of https://github.com/bitwarden/browser synced 2025-12-11 22:03:36 +00:00
Code Issues Releases Wiki Activity

fix: enable dynamic URLs for Chrome web accessible resources (#17429)

Browse Source 
This commit adds use_dynamic_url: true to the extension's web_accessible_resources configuration. When enabled, Chrome generates random session-based GUIDs for extension resource URLs instead of using the predictable static extension ID. This enhances privacy by making extension resource URLs unpredictable and prevents third-party enumeration of installed extensions.

The feature is supported in Chrome 102+ and changes resource URLs from chrome-extension://[static-id]/resource to chrome-extension://[random-guid]/resource, with GUIDs regenerating each browser session while maintaining all existing extension functionality.

Addresses: https://bitwarden.atlassian.net/browse/PM-28344
This commit is contained in:
Addison Beck
2025-11-19 14:57:59 -05:00
committed by GitHub
parent 9ee4fd0e44
commit e44ab1b411
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
apps/browser/src/manifest.v3.json
View File

@@ -164,7 +164,8 @@
"overlay/menu.html", "overlay/menu.html",
"popup/fonts/*" "popup/fonts/*"
], ],
"matches": ["<all_urls>"] "matches": ["<all_urls>"],
"use_dynamic_url": true
} }
], ],
"__firefox__browser_specific_settings": { "__firefox__browser_specific_settings": {