Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update extension dialogue text so it's not as misleading #3231

Closed
karenkliu opened this issue Feb 5, 2019 · 10 comments · Fixed by brave/brave-core#2632
Closed

Update extension dialogue text so it's not as misleading #3231

karenkliu opened this issue Feb 5, 2019 · 10 comments · Fixed by brave/brave-core#2632

Comments

@karenkliu
Copy link

Description

When I try to add any extension to Brave from the Chrome Store, I get this message:
screen shot 2019-02-05 at 12 11 45 pm

We should improve the warning message so it doesn't send the wrong message to the user.

Steps to Reproduce

  1. Go to https://chrome.google.com/webstore/category/extensions
  2. Click on any extension
  3. Click "Add to Chrome"

Designs

Update message to "Brave has not reviewed this extension for security and safety. Only install this extension if you trust the developer. It can:"
extension dialogue text

This text has been reviewed in #1408.

@tildelowengrimm
Copy link
Contributor

This text is security approved 👍

@rebron rebron added the priority/P3 The next thing for us to work on. It'll ride the trains. label Mar 1, 2019
@rebron
Copy link
Collaborator

rebron commented Mar 1, 2019

cc: @bbondy, @mkarolin can you guys take a look, will likely want to get this in as soon as we can e.g. 62.x.

@mkarolin
Copy link
Contributor

mkarolin commented Mar 1, 2019

@karenkliu "It can:" label is tied to the permissions. If an extension doesn't ask for any permissions the label isn't shown:
image
I assume we would still want the label there in such cases, just without "It can:" part?

@tildelowengrimm
Copy link
Contributor

I think it's better to keep the "It can:" separate.

@karenkliu
Copy link
Author

@mkarolin @tomlowenthal Yes, correct, we keep "It can: ..." separate so that if the extension doesn't ask for any permissions, it will still say "Brave has not reviewed this extension for security and safety. Only install this extension if you trust the developer." without the "It can: ..." part.

@LaurenWags
Copy link
Member

@karenkliu @tomlowenthal @simonhong @rebron

A couple of questions:

  1. We don't seem to show this new message for some extensions (LastPass, Honey, Grammarly, etc). Is this ok? If so, is it necessary to have a full list of extensions which would be exempt from this message for QA to check?

  2. When this new message displays, we're no longer showing the extension name in the message box, is this ok?
    ex. This is how the message displays for Google Translate:
    https://chrome.google.com/webstore/detail/google-translate/aapbdbdomjkkjkaonfhkkikfgjllcleb
    Screen Shot 2019-08-06 at 8 29 31 AM

cc @kjozwiak

@tildelowengrimm
Copy link
Contributor

@LaurenWags

  1. Yes, there's a list of several extensions we've reviewed, and which shouldn't show this warning. I think @rebron owns that document.

  2. No, that's a bug. The design spec up at the top shows the extension name by way of a header. That should be implemented.

@rebron
Copy link
Collaborator

rebron commented Aug 7, 2019

@LaurenWags Should we keep this one closed and file a new issue for the extension name in header?
I'll get you the list of extensions where this warning isn't supposed to show up.

@LaurenWags
Copy link
Member

@rebron yep - that's the correct process. I'll close this one again and have logged #5575. Please take a look at the new issue - I added all the same labels as this (including priority) - which may need to be adjusted.

@btlechowski
Copy link

btlechowski commented Aug 7, 2019

Verification passed on

Brave 0.68.118 Chromium: 76.0.3809.87 (Official Build) beta (64-bit)
Revision 111fe1e15d5ced26080a7dc239bcfe70f6c49aad-refs/branch-heads/3809@{#967}
OS Ubuntu 18.04 LTS

Reproduced #5575

image

  • Verification passed on
Brave 0.68.129 Chromium: 76.0.3809.100 (Official Build) (64-bit)
Revision ed9d447d30203dc5069e540f05079e493fc1c132-refs/branch-heads/3809@{#990}
OS Windows 10 OS Version 1803 (Build 17134.523)
  • Encountered Extension name not in dialog box - follow up to 3231 #5575
  • Verified that the warning message is not displayed for Pocket/Last Pass/Honey/Grammarly
  • Verified that the warning message displayed as expected for few extensions uBlock/Google hangouts/Google Translate /Speedtest/Line/Momentum/Evernote web clipper

image

image

image

image

image

image

image

Verified passed with

Brave 0.68.130 Chromium: 76.0.3809.100 (Official Build) (64-bit)
Revision ed9d447d30203dc5069e540f05079e493fc1c132-refs/branch-heads/3809@{#990}
OS Mac OS X
  • Encountered Extension name not in dialog box - follow up to 3231 #5575
  • Verified that the warning message is not displayed for Pocket/Last Pass/Honey/Grammarly
  • Verified that the warning message displayed as expected for few extensions Custom Cursor/Google Translate/Dark Reader/Colorful Rubik's Cube
    Screen Shot 2019-08-15 at 5 42 13 PM
    Screen Shot 2019-08-15 at 5 41 46 PM
    Screen Shot 2019-08-15 at 5 41 27 PM
    Screen Shot 2019-08-15 at 5 41 04 PM
    Screen Shot 2019-08-15 at 5 42 48 PM
    Screen Shot 2019-08-15 at 5 39 11 PM
    Screen Shot 2019-08-15 at 5 46 06 PM
    Screen Shot 2019-08-15 at 5 38 39 PM

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging a pull request may close this issue.

9 participants