Strange chrome extension - config.json

sokoliar

Hello,

I just noticed, all web pages load XHR request - chrome-extension://jffbochibkahlbbmanpmndnhmeliecah/config.json

It cointains something like this:

[
  { "host": "ceskatelevize.cz", "selector": "#ctPlayer1", "capture": true },
  { "host": "netflix.com", "selector": "html", "capture": true },
  { "host": "nicovideo.jp", "selector": ".PlayerContainer", "capture": true },
  { "host": "kvs-demo.com", "selector": "#kt_player", "capture": true },
  { "host": "periscope.tv", "selector": ".EventHandler-Layer", "capture": true },
  { "host": "pluralsight.com", "selector": ".player-wrapper", "capture": false },
  { "host": "primevideo.com", "selector": "#dv-web-player", "capture": true },
  { "host": "rutube.ru", "selector": ".video-js", "capture": true },
  { "host": "ruv.is", "selector": ".video-js", "capture": true },
  { "host": "ted.com", "selector": "html", "capture": false },
  { "host": "twitch.tv", "selector": ".persistent-player", "capture": false },
  { "host": "vimeo.com", "zIndex": "300", "selector": ".player", "capture": false },
  { "host": "yandex.ru", "selector": ".player-container", "capture": true },
  { "host": "youtube.com", "zIndex": "10" }
]

What is that? I have only 3 extensions, all deactivated and xhr is still here. In incognito window too.

I tried google it but no results.

Thanks

Gwen-Dragon

@sokoliar That internally for the Picture-in-Picture feature (its config file) which is injected on webpages with video.

Gwen-Dragon

@sokoliar Welcome to our Forum.

Here are a few links for your bookmarks that you may find useful:

Do not hesitate to ask, we are a community to help users.

Enjoy browsing.

sokoliar

Thanks

ZuBB

@Gwen-Dragon said in Strange chrome extension - config.json:

@sokoliar That internally for the Picture-in-Picture feature (its config file) which is injected on webpages with video.

but why you have to make this extension hidden? user does not see it in the list, but is able to reveal its presence in dev toolbar.

also why it is working for all websites and pages? it already has a list of sites that should profits of its presence?

vv@griffin ~/Library/Application Support/Vivaldi/Default/Extensions/cjpalhdlnbpafiamejdnhcphjbkeiagm/1.29.2_0 $ grep matches manifest.json
      "matches": [ "http://*/*", "https://*/*" ],
      "matches": [ "http://*/*", "https://*/*" ],
vv@griffin ~/Library/Application Support/Vivaldi/Default/Extensions/cjpalhdlnbpafiamejdnhcphjbkeiagm/1.29.2_0 $

and finally it wants quite a lot of permissions. is it really requires all of that?

vv@griffin ~/Library/Application Support/Vivaldi/Default/Extensions/cjpalhdlnbpafiamejdnhcphjbkeiagm/1.29.2_0 $ grep perm manifest.json
   "permissions": [ "contextMenus", "privacy", "storage", "tabs", "unlimitedStorage", "webNavigation", "webRequest", "webRequestBlocking", "\u003Call_urls>" ],
vv@griffin ~/Library/Application Support/Vivaldi/Default/Extensions/cjpalhdlnbpafiamejdnhcphjbkeiagm/1.29.2_0 $ vim .

ZuBB

@Gwen-Dragon said in Strange chrome extension - config.json:

@sokoliar That internally for the Picture-in-Picture feature

thing is that subject (meta)extension does multiple features. and PiP is only one of them. another one is ad blocking.. thats why you so many perms...