chrome.contentSettings
Description: |
Use the chrome.contentSettings API to change settings that control whether websites can use features such as cookies, JavaScript, and plug-ins. More generally speaking, content settings allow you to customize Chrome's behavior on a per-site basis instead of globally.
|
Availability: |
Stable since Chrome 16.
|
Permissions: |
"contentSettings"
|
Manifest
You must declare the "contentSettings" permission in your extension's manifest to use the API. For example:
{ "name": "My extension", ... "permissions": [ "contentSettings" ], ... }
Content setting patterns
You can use patterns to specify the websites that each content setting affects.
For example, http://*.youtube.com/*
specifies youtube.com and all
of its subdomains. The syntax for content setting patterns is the same as for
match patterns, with a few differences:
- For
http
,https
, andftp
URLs, the path must be a wildcard (/*
). Forfile
URLs, the path must be completely specified and must not contain wildcards. - In contrast to match patterns, content setting patterns can specify a port number. If a port number is specified, the pattern only matches websites with that port. If no port number is specified, the pattern matches all ports.
Pattern precedence
When more than one content setting rule applies for a given site, the rule with the more specific pattern takes precedence.
For example, the following patterns are ordered by precedence:
http://www.example.com/*
http://*.example.com/*
(matching example.com and all subdomains)<all_urls>
(matching every URL)
Three kinds of wildcards affect how specific a pattern is:
- Wildcards in the port (for example
http://www.example.com:*/*
) - Wildcards in the scheme (for example
*://www.example.com:123/*
) - Wildcards in the hostname (for example
http://*.example.com:123/*
)
If a pattern is more specific than another pattern in one part but less specific in another part, the different parts are checked in the following order: hostname, scheme, port. For example, the following patterns are ordered by precedence:
http://www.example.com:*/*
Specifies the hostname and scheme.*:/www.example.com:123/*
Not as high, because although it specifies the hostname, it doesn't specify the scheme.http://*.example.com:123/*
Lower because although it specifies the port and scheme, it has a wildcard in the hostname.
Primary and secondary patterns
The URL taken into account when deciding which content setting to apply depends on the content type. For example, for contentSettings.notifications settings are based on the URL shown in the omnibox. This URL is called the "primary" URL.
Some content types can take additional URLs into account. For example, whether a site is allowed to set a contentSettings.cookies is decided based on the URL of the HTTP request (which is the primary URL in this case) as well as the URL shown in the omnibox (which is called the "secondary" URL).
If multiple rules have primary and secondary patterns, the rule with the more specific primary pattern takes precedence. If there multiple rules have the same primary pattern, the rule with the more specific secondary pattern takes precedence. For example, the following list of primary/secondary pattern pairs is ordered by precedence:
Precedence | Primary pattern | Secondary pattern |
---|---|---|
1 | http://www.moose.com/* , |
http://www.wombat.com/* |
2 | http://www.moose.com/* , |
<all_urls> |
3 | <all_urls> , |
http://www.wombat.com/* |
4 | <all_urls> , |
<all_urls> |
Resource identifiers
Resource identifiers allow you to specify content settings for specific subtypes of a content type. Currently, the only content type that supports resource identifiers is contentSettings.plugins, where a resource identifier identifies a specific plug-in. When applying content settings, first the settings for the specific plug-in are checked. If there are no settings found for the specific plug-in, the general content settings for plug-ins are checked.
For example, if a content setting rule has the resource identifier
adobe-flash-player
and the pattern <all_urls>
,
it takes precedence over a rule without a resource identifier and the pattern
http://www.example.com/*
, even if that pattern is more specific.
You can get a list of resource identifiers for a content type by calling the contentSettings.ContentSetting.getResourceIdentifiers method. The returned list can change with the set of installed plug-ins on the user's machine, but Chrome tries to keep the identifiers stable across plug-in updates.
Examples
You can find samples of this API on the sample page.
Summary
Types | |
---|---|
ResourceIdentifier | |
ContentSetting | |
Properties | |
cookies | |
images | |
javascript | |
plugins | |
popups | |
notifications |
Types
ResourceIdentifier
properties | ||
---|---|---|
string | id | The resource identifier for the given content type. |
string | (optional) description | A human readable description of the resource. |
ContentSetting
methods | |||||||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
clear
ContentSetting.clear(object details, function callback)
Clear all content setting rules set by this extension.
| |||||||||||||||||||||||||||
get
ContentSetting.get(object details, function callback)
Gets the current content setting for a given pair of URLs.
| |||||||||||||||||||||||||||
set
ContentSetting.set(object details, function callback)
Applies a new content setting rule.
| |||||||||||||||||||||||||||
getResourceIdentifiers
ContentSetting.getResourceIdentifiers(function callback)
|
Properties
ContentSetting | chrome.contentSettings.cookies |
Whether to allow cookies and other local data to be set by websites. One of allow: Accept cookies, block: Block cookies, session_only: Accept cookies only for the current session. Default is allow. The primary URL is the URL representing the cookie origin. The secondary URL is the URL of the top-level frame. |
ContentSetting | chrome.contentSettings.images |
Whether to show images. One of allow: Show images, block: Don't show images. Default is allow. The primary URL is the main-frame URL. The secondary URL is the URL of the image. |
ContentSetting | chrome.contentSettings.javascript |
Whether to run JavaScript. One of allow: Run JavaScript, block: Don't run JavaScript. Default is allow. The primary URL is the main-frame URL. The secondary URL is not used. |
ContentSetting | chrome.contentSettings.plugins |
Whether to run plug-ins. One of allow: Run plug-ins automatically, block: Don't run plug-ins automatically. Default is allow. The primary URL is the main-frame URL. The secondary URL is not used. |
ContentSetting | chrome.contentSettings.popups |
Whether to allow sites to show pop-ups. One of allow: Allow sites to show pop-ups, block: Don't allow sites to show pop-ups. Default is block. The primary URL is the main-frame URL. The secondary URL is not used. |
ContentSetting | chrome.contentSettings.notifications |
Whether to allow sites to show desktop notifications. One of allow: Allow sites to show desktop notifications, block: Don't allow sites to show desktop notifications, ask: Ask when a site wants to show desktop notifications. Default is ask. The primary URL is the main-frame URL. The secondary URL is not used. |