<- Chrome Settings Library

SubAppsAPIsAllowedWithoutGestureAndAuthorizationForOrigins

Allow subApps APIs to be called without prior user gesture or requiring user confirmation.
Last updated October 8, 2024

For security reasons, the subApps.add(), subApps.remove() and subApps.list() web APIs require a prior user gesture ("transient activation") to be called or will otherwise fail. In addition, the user will be requested to confirm the operation via a confirmation dialog. With this policy set, admins can specify origins on which these APIs can be called without prior user gesture, nor asking the user for confirmation. For detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy. If this policy is unset, all origins will require a prior user gesture to call these APIs, and will present a confirmation dialog to the user.

Supported On:
Platform Start End
ChromeOS 123
Example value:

{"0":"https://www.example.com","1":"[*.]example.edu"}

Features: