Posted on Leave a comment

Restrictive Private API availability in Chromium

During a recent exam, we discovered that some thirdparty Chromium based browsers could actually integrate Google features, instance Chrome sync and Simply click to Call, that are simply intended for Google’s use. This skill meant that a small fraction of users could perhaps sign into their Google Address and store their unique Chrome sync data, for instance , bookmarks, not just with Google Chrome, but also with some third-party Chrome based browsers. We are restrictive access to our private Chromium APIs starting on Goal 15, 2021.

For boots who accessed Google attributes (like Chrome sync) in a third-party Chromium based browser, their data will continue to be available in their Google Account, and as a consequence data that they have stored in your area will continue to be available locally. Keep in mind, users can view with manage their data in regards to the My Online Activity page . Malware can also download their information and facts from the Yahoo Takeout page , or delete it here .  
Guidance for vendors towards third-party Chromium based choices is available on the Chromium wiki .

Posted by Jochen Eisinger, Engineering Director, Google Chrome 

Leave a Reply

Your email address will not be published. Required fields are marked *