fix(extension): drop unneeded tabs permission

This commit is contained in:
Tautvydas Derzinskas committed 2026-09-29 07:09:10 +02:00
1 parent dae33246aa
commit 9549148dfd
2 files changed
+9 -10

No files matched your search

+8 -9
View File
@@ -1,6 +1,6 @@
# Thingport Grab privacy policy
_Effective 27 September 2026._
_Effective 29 September 2026._
Thingport Grab is a browser extension that imports 3D-printing models from MakerWorld, Printables
and Thingiverse into **your own self-hosted Thingport instance**. It has no servers of its own: the
@@ -62,14 +62,13 @@ model, and the model links listed on collection pages. It doesn't read any other
## Permissions
| Permission | Why |
| ------------------------------------------------ | -------------------------------------------------------------------------------------------------------------- |
| Storage | Keeps the settings and data listed under "What the extension stores". |
| Tabs | Opens imported models and the setup form, and moves between model pages during a MakerWorld collection import. |
| Cookies | Reads MakerWorld's session cookie, only on makerworld.com, for MakerWorld imports. |
| Downloads | Reads the link from the MakerWorld download it starts, then cancels and removes that download. |
| Access to MakerWorld, Printables and Thingiverse | Shows the import button on their pages. |
| Access to your Thingport instance | Requested for that one address when you set the extension up, so it can talk to your instance. |
| Permission | Why |
| ------------------------------------------------ | ---------------------------------------------------------------------------------------------- |
| Storage | Keeps the settings and data listed under "What the extension stores". |
| Cookies | Reads MakerWorld's session cookie, only on makerworld.com, for MakerWorld imports. |
| Downloads | Reads the link from the MakerWorld download it starts, then cancels and removes that download. |
| Access to MakerWorld, Printables and Thingiverse | Shows the import button on their pages. |
| Access to your Thingport instance | Requested for that one address when you set the extension up, so it can talk to your instance. |
## Your control over your data
+1 -1
View File
@@ -28,7 +28,7 @@ export function buildManifest(target: Target, pkg: { version: string; descriptio
default_icon: iconSet("dark"),
},
background: target === "firefox" ? { scripts: ["background.js"] } : { service_worker: "background.js" },
permissions: ["storage", "tabs", "cookies", "downloads"],
permissions: ["storage", "cookies", "downloads"],
// The user's instance origin, requested at setup.
optional_host_permissions: ["*://*/*"],
content_scripts: [{ matches: PROVIDER_MATCHES, js: ["content.js"], run_at: "document_idle" }],