Can an extension be disabled by modifying a json file?

jawt
New Contributor

I am investigating the possibility that a student is bypassing an extension based web filter by modifying the json file associated with the extension.  Does anyone know if this is possible?  The web filter company is baffled by this one.  Thank you!

5 REPLIES 5

NielsBrockmeier
Contributor

That depends a lot on the extension itself. Just from experience, I wouldn't think it is possible, but there are so many ways of coding an extension that it might be possible anyway. Knowing that from the Admin you can add a JSON file to control certain extensions I would be inclined to think this can definitely be a possibility. 

MattDPenn
Contributor II

If the JSON file is theoretically accessible by the user then where does it get stored? This isn't something I thought about as I assumed when a JSON is deployed from Google Admin that it would be deployed in such a way that a student shouldn't be able to get at it. Also Windows Chrome or ChromeOS Chrome?

jawt
New Contributor

It happened on a Chromebook.  We figured out what happened with the help of another admin group.  There is a method to disable CB extensions using three links demonstrated on a video on Youtube.  It shows how to access the json through a chrome-extension://[extension id]/manifest.json, click 2 other links, and they disappear from the extension (which is an extension based web filter).  

So the solution would be be to block chrome-extension://* so students can't get into it or would that mess with the extensions?

Yes, it could cause an issue, if you have a chrome extension that needs to open using that URL.

Adobe Reader, for exemple.

But, then you could allow just those extensions you want to be able to run like that.

--
https://wheretofind.me/@NoSubstitute