Performing a web request without host_permissions

Skip to first unread message

Pawel Kacprzak

Sep 29, 2022, 8:01:08 PMSep 29
to Chromium Extensions
I'm in the process of updating my extension to MV3 and adding some extra features that require authorized access. To do that I'm using Firebase with a flow described here:

This works fine in development but I found out that firebase/auth makes a request to endpoint to sign in a user. I don't have this host added to host_permissions in manifest.json and the requests seem to work just fine. Can I leave it like that or do I have to add this endpoint to host_permissions? If possible I'd prefer to not add it to avoid handling permission warnings and/or requesting optional_host_permissions.



Sep 30, 2022, 10:17:21 AMSep 30
to Chromium Extensions,
The server sets the appropriate cross origin headers to make the API available without restrictions, so as long as it works you don't need it in host_permissions. 

Pawel Kacprzak

Sep 30, 2022, 10:25:53 AMSep 30
to Chromium Extensions, wOxxOm, Pawel Kacprzak
That makes sense. Thanks for the explanation.

clara perilla

Sep 30, 2022, 7:49:07 PMSep 30
to Pawel Kacprzak, Chromium Extensions, wOxxOm, Pawel Kacprzak
Hi to everyone can you guide me and we cooperate to finish what we need to upgrade and for extension and need to update thank you.

From: <> on behalf of Pawel Kacprzak <>
Sent: Friday, September 30, 2022 6:25:53 PM
To: Chromium Extensions <>
Cc: wOxxOm <>; Pawel Kacprzak <>
Subject: [crx] Re: Performing a web request without host_permissions
You received this message because you are subscribed to the Google Groups "Chromium Extensions" group.
To unsubscribe from this group and stop receiving emails from it, send an email to
To view this discussion on the web visit
Reply all
Reply to author
0 new messages