Allow subApps APIs to be called without prior user gesture or requiring user confirmation.
Last updated October 8, 2024
For security reasons, the
subApps.add(),
subApps.remove() and
subApps.list() web APIs
require a prior user gesture ("transient activation") to be called or will
otherwise fail. In addition, the user will be requested to confirm the
operation via a confirmation dialog.
With this policy set, admins can specify origins on which these APIs can be
called without prior user gesture, nor asking the user for confirmation.
For detailed information on valid url patterns, please see
https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is
not an accepted value for this policy.
If this policy is unset, all origins will require a prior user gesture to call
these APIs, and will present a confirmation dialog to the user.