permissions

Host permissions

Host permissions are specified as match patterns, and each pattern identifies a group of URLs for which the extension is requesting extra privileges. For example, a host permission could be "*://developer.mozilla.org/*".

The extra privileges include:

• XMLHttpRequest and fetch access to those origins without cross-origin restrictions.

  Note: For Manifest V2 extensions in Firefox only, this includes requests made from content scripts.

• the ability to read tab-specific metadata without the "tabs" permission, such as the url, title, and favIconUrl properties of tabs.Tab objects
• the ability to inject content scripts and styles programmatically into pages served from those origins.
• the ability to receive events from the webRequest API for these hosts
• the ability to access cookies for that host using the cookies API, as long as the "cookies" API permission.
• bypassing tracking protection for extension pages where a host is specified as a full domain or with wildcards. Content scripts, however, can only bypass tracking protection for hosts specified with a full domain.
• the ability to create and retrieve WebAuthn credentials. See Use Web Authn API in web extensions for details.

API permissions

You specify API permissions as keywords, and each keyword names a WebExtension API that the extension would like to use.

These permissions are available in Manifest V2 and above unless otherwise noted:

• activeTab
• alarms
• background
• bookmarks
• browserSettings
• browsingData
• captivePortal
• clipboardRead
• clipboardWrite
• contentSettings
• contextMenus
• contextualIdentities
• cookies
• debugger
• declarativeNetRequest
• declarativeNetRequestFeedback
• declarativeNetRequestWithHostAccess
• devtools (This permission is granted implicitly when the devtools_page manifest key is present.)
• dns
• downloads
• downloads.open
• find
• geolocation
• history
• identity
• idle
• management
• menus
• menus.overrideContext
• nativeMessaging
• notifications
• pageCapture
• pkcs11
• privacy
• proxy
• scripting
• search
• sessions
• storage
• tabGroups
• tabHide
• tabs
• theme
• topSites
• unlimitedStorage
• userScripts (see userScripts permission)
• webNavigation
• webRequest
• webRequestAuthProvider (Manifest V3 and above)
• webRequestBlocking
• webRequestFilterResponse
• webRequestFilterResponse.serviceWorkerScript

In most cases, the permission grants access to the API only, with these exceptions:

• tabs gives you access to privileged parts of the tabs API without the need for host permissions: Tab.url, Tab.title, and Tab.faviconUrl.

  • In Firefox 85 and earlier, you also need tabs if you want to include url in the queryInfo parameter to tabs.query(). The extension can use the rest of the tabs API without requesting any permission.
  • As of Firefox 86 and Chrome 50, matching host permissions can also be used instead of the "tabs" permission.

• webRequestBlocking enables you to use the "blocking" argument, so you can modify and cancel requests.

• downloads.open lets you use the downloads.open() API.

• tabHide lets you use the tabs.hide() API.

activeTab permission

If an extension has the "activeTab" permission, when a user interacts with the extension, the extension is granted extra privileges for the active tab only.

These interactions are known as user actions and include the user:

• clicking the extension's toolbar button or page action.
• selecting an extension's context menu item.
• activating a keyboard shortcut defined by the extension (from Firefox 63).
• clicking a button on a page bundled with the extension.
• clicking an extension suggestion in the address bar (omnibox) (from Firefox 142).

The extra privileges are:

• The ability to inject JavaScript or CSS into the tab programmatically (see Loading content scripts).
• Access to the privileged parts of the tabs API for the current tab: Tab.url, Tab.title, and Tab.faviconUrl.

The intent of this permission is to enable extensions to fulfill a common use case without granting them overly powerful permissions. Many extensions want to "do something to the current page when the user asks".

For example, consider an extension that wants to run a script in the current page when the user clicks a browser action. If the activeTab permission did not exist, the extension would need to ask for the host permission <all_urls>. But this gives the extension more power than it needs: it can now execute scripts in any tab, any time it likes, instead of just the active tab and only in response to a user action.

The activeTab permission enables scripting access to the top-level tab's page and same-origin frames. Running scripts or modifying styles inside cross-origin frames may require additional host permissions. Of course, restrictions and limitations related to particular sites and URI schemes are applied as well.

Usually, the tab that's granted activeTab is the active tab, with one exception. An extension can create a menu item using the menus API that displays when the user context-clicks a tab. That is, a menu on an element in the tabstrip that lets the user switch between tabs. If the user clicks this menu, then the activeTab permission is granted for the tab the user clicked, even if it's not the active tab (as of Firefox 63, Firefox bug 1446956).

Clipboard access

Two permissions enable an extension to interact with the clipboard:

clipboardWrite

Write to the clipboard using Clipboard.write(), Clipboard.writeText(), document.execCommand("copy") or document.execCommand("cut").

clipboardRead

Read from the clipboard using Clipboard.read(), Clipboard.readText() or document.execCommand("paste").

See Interact with the clipboard for more details.

Unlimited storage

The unlimitedStorage permission:

• Enables extensions to exceed any quota imposed by the storage.local API
• In Firefox, enables extensions to create a "persistent" IndexedDB database without the browser prompting the user for permission at the time the database is created.

Examples

 "permissions": ["*://developer.mozilla.org/*"]

In Manifest V2 only, request privileged access to pages under developer.mozilla.org.

  "permissions": ["tabs"]

Request access to the privileged pieces of the tabs API.

  "permissions": ["*://developer.mozilla.org/*", "tabs"]

In Manifest V2 only, request both of the above permissions.

Browser compatibility