RetireJS / RetireJS/retire.js

Chrome Web Store doesn't like Tabs permissions

Open
#465 5 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
JavaScript
Stars
4.2k
Forks
441
Avg merge
16h 24m
Merged PRs (30d)
3

Description

The Google Web Store doesn't allow Tabs permissions used by the service_worker.js file.

Information provided from Google when trying to deploy Google extension to the Google Web Store.
Violation(s):

Use of Permissions:

Violation reference ID: Purple Potassium

Violation:
The following permission(s) need not be requested for the methods/properties implemented by the item:
tabs

How to rectify: Remove the above permission(s). The properties used by the items will continue to function even without requesting these permissions.

Relevant section of the program
policy:
Request access to the narrowest permissions necessary to implement your Product's features or services. Don't attempt to "future proof" your Product by requesting a permission that might benefit services or features that have not yet been implemented. (learn more)

This violation was detected as a result of an internal review. Learn more about enforcement here.

For reference: https://developer.chrome.com/docs/webstore/troubleshooting/#excessive-permissions

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by locating service_worker.js and the extension configuration where the tabs permission is declared. Check which methods or properties the service worker uses, then remove only the unnecessary permission and verify the extension still works without it. Done means the permission is no longer requested and the Chrome Web Store violation is resolved.

Written by the indexing model from the issue text.

Assessment

Tech stack
javascript
Domain
security
Issue type
Bug
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
55/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.