Google: Chrome extensions will only be installed from its Web Store
Google will require most extensions for the Chrome browser to be installed from its own Web Store, a move aimed at stopping users from inadvertently installing malicious extensions.
Google has been gradually changing its policy around extensions in an effort to prevent abuse. Last year, it mandated that all Google Chrome extensions be hosted in its own store, wrote Jake Leichtling, director of platform product for extensions .
The change caused a 75% drop in requests from customers asking how to uninstall unwanted extensions. This did not apply to the Windows developer channel, but hackers are now using it to install extensions.
Starting Wednesday, all extensions for Windows will have to be hosted in its store, and the same will apply to OS X in July.
Google automatically analyzes extensions for malicious behavior. Most are published after analysis, although some may be "held" for manual review. It bans, for example, extensions that are involved with advertising or are spammy.
For development purposes, Google will still allow extensions to be installed locally, as well as force businesses to use a group policy for installation, Leichtling wrote.
In order not to disrupt the user experience, Google also allows so-called inline installations, where a user appears to be installing an extension directly from a website, which is actually hosted in the Web Store.
