fix: remove unrecognized manifest key #9301

[duttarnab]

closes #9301

[dryrunsecurity]

DryRun Security Summary

The pull request contains a minor update to the manifest.json file for the "jans-tarp" Chrome extension, including the removal of the _comment field and an update to the description field, with a review of the security-related considerations such as the use of Manifest Version 3, the requested permissions, the host permissions, and the extension's behavior in incognito mode.

Expand for full summary

Summary:

The code changes in this pull request appear to be a minor update to the manifest.json file for the "jans-tarp" Chrome extension. The key changes include the removal of the _comment field and an update to the description field to provide more information about the manifest_version field.

From an application security perspective, there are a few important considerations:

1. Manifest Version 3: The extension is using Manifest Version 3, which includes several security-related changes. It's important to ensure that the extension is properly configured and using the new features and APIs correctly to maintain a high level of security.

2. Permissions: The extension requests several permissions, including storage, identity, and tabs. These permissions should be carefully reviewed to ensure that they are necessary for the extension's functionality and that they are not being misused or abused.

3. Host Permissions: The extension also requests host_permissions for *://*/*, which allows the extension to access any website. This is a broad permission that should be reviewed to ensure that it is necessary and that the extension is not accessing or modifying sensitive data on websites it should not have access to.

4. Incognito Mode: The extension is configured to work in "split" incognito mode, which means that it can access and modify data in both normal and incognito browser sessions. This should be reviewed to ensure that the extension is not accessing or modifying sensitive data in incognito mode.

Files Changed:

• demos/jans-tarp/src/static/chrome/manifest.json: This file contains the manifest for the "jans-tarp" Chrome extension. The changes include the removal of the _comment field and an update to the description field to provide more information about the manifest_version field.

Code Analysis

We ran 9 analyzers against 1 file and 0 analyzers had findings. 9 analyzers had no findings.

Riskiness

🟢 Risk threshold not exceeded.

View PR in the DryRun Dashboard.