topic Re: Can an extension be disabled by modifying a json file? in Peer-Peer Topics

Can an extension be disabled by modifying a json file?

jawt — Wed, 17 Apr 2024 20:50:54 GMT

I am investigating the possibility that a student is bypassing an extension based web filter by modifying the json file associated with the extension. Does anyone know if this is possible? The web filter company is baffled by this one. Thank you!

Re: Can an extension be disabled by modifying a json file?

NielsBrockmeier — Thu, 18 Apr 2024 10:43:17 GMT

That depends a lot on the extension itself. Just from experience, I wouldn't think it is possible, but there are so many ways of coding an extension that it might be possible anyway. Knowing that from the Admin you can add a JSON file to control certain extensions I would be inclined to think this can definitely be a possibility.

Re: Can an extension be disabled by modifying a json file?

MattDPenn — Thu, 18 Apr 2024 16:45:41 GMT

If the JSON file is theoretically accessible by the user then where does it get stored? This isn't something I thought about as I assumed when a JSON is deployed from Google Admin that it would be deployed in such a way that a student shouldn't be able to get at it. Also Windows Chrome or ChromeOS Chrome?

Re: Can an extension be disabled by modifying a json file?

jawt — Thu, 18 Apr 2024 18:22:32 GMT

It happened on a Chromebook. We figured out what happened with the help of another admin group. There is a method to disable CB extensions using three links demonstrated on a video on Youtube. It shows how to access the json through a chrome-extension://[extension id]/manifest.json, click 2 other links, and they disappear from the extension (which is an extension based web filter).

Re: Can an extension be disabled by modifying a json file?

MattDPenn — Thu, 18 Apr 2024 18:38:17 GMT

So the solution would be be to block chrome-extension://* so students can't get into it or would that mess with the extensions?

Re: Can an extension be disabled by modifying a json file?

Kim_Nilsson — Fri, 19 Apr 2024 07:10:39 GMT

Yes, it could cause an issue, if you have a chrome extension that needs to open using that URL.

Adobe Reader, for exemple.

But, then you could allow just those extensions you want to be able to run like that.