Skip to content

Chromium Browser Extensions: report ID, version, host permissions and content script matches - #56

Merged
scudette merged 5 commits into
Velocidex:masterfrom
abdelghafourbouhdyd:chromium-extensions-mv3
Oct 13, 2026
Merged

scudette merged 5 commits into
Velocidex:masterfrom
abdelghafourbouhdyd:chromium-extensions-mv3

Conversation

@abdelghafourbouhdyd

Copy link
Copy Markdown

Problem

  • Manifest V3 extensions list the sites they can access in host_permissions, not permissions. The rule didn't report them, so <all_urls> grants were only visible inside _Manifest.
  • The extension ID and version were only available inside OSPath.
  • Localized names were not resolved when the message key had capitals (e.g. __MSG_appName__). ResolveName lowercases the key, but the locale dict keys were not lowercased.

Changes

  • New columns: ID, Version, ManifestVersion, HostPermissions and ContentScriptMatches (all content_scripts[].matches merged, without duplicates).
  • Locale keys are lowercased before lookup, since Chrome message names are case-insensitive.
  • Glob changed to Extensions/*/*/manifest.json so ID and Version always come from the right folders.
  • Added Vivaldi to LinuxChromeProfiles.
  • Added a golden test with an MV3 extension (with locale) and an MV2 extension.

Follow-up to Velocidex/velociraptor#5077.

@CLAassistant

CLAassistant commented Oct 13, 2026 •

Copy link
Copy Markdown

CLA assistant check
All committers have signed the CLA.

@scudette
scudette merged commit 44610fa into Velocidex:master Oct 13, 2026
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants