diff options
| author | praschke <stel@comfy.monster> | 2023-10-29 16:08:53 +0000 |
|---|---|---|
| committer | praschke <stel@comfy.monster> | 2023-10-29 16:08:53 +0000 |
| commit | 9c003ec233136690c4efcee15341352400ce145d (patch) | |
| tree | c04b5cd89a3ecae9f0bc6efdb8ae644ffdc62c0a /docs/permissions.md | |
| parent | 55897b2b29e88ffd0c9140d03b9e74c4a94d98bd (diff) | |
remove webRequest from chrome for real
Diffstat (limited to 'docs/permissions.md')
| -rw-r--r-- | docs/permissions.md | 15 |
1 files changed, 5 insertions, 10 deletions
diff --git a/docs/permissions.md b/docs/permissions.md index 57f9f0b2..3fdf72d8 100644 --- a/docs/permissions.md +++ b/docs/permissions.md @@ -9,13 +9,8 @@ `unlimitedStorage` is used to help prevent web browsers from unexpectedly deleting dictionary data. -* `webRequest` <br> - Yomichan uses this permission to collect audio or create Anki notes using - [AnkiConnect](https://ankiweb.net/shared/info/2055492159). - It is also required to surface error information from failed requests. - -* `webRequestBlocking` _(Firefox only)_ <br> - Yomichan uses this permission to ensure certain requests have valid and secure headers. +* `webRequest` and `webRequestBlocking` _(Firefox only)_ <br> + Yomichan uses these permissions to ensure certain requests have valid and secure headers. This sometimes involves removing or changing the `Origin` request header, as this can be used to fingerprint browser configuration. @@ -24,11 +19,11 @@ This sometimes involves removing or changing the `Origin` request header, as this can be used to fingerprint browser configuration. -* `scripting` _(Manifest V3 only)_ <br> - Yomichan will sometimes need to inject stylesheets into webpages in order to +* `scripting` <br> + Yomichan needs to inject content scripts and stylesheets into webpages in order to properly display the search popup. -* `offscreen` __(Chrome only)_ <br> +* `offscreen` _(Chrome only)_ <br> Yomitan uses this permission to create a secondary backend document that has DOM access, given that Manifest v3 service workers do not. Service workers can then reach out to out to this document in order to complete actions that require access to DOM APIs, such as any that require clipboard access. |