Web Request

webRequest

Medium RiskCategory: Web Traffic ControlView Official Docs↗

Technical Context

Enables access to the chrome.webRequest API for observing and analyzing network traffic in real-time. Without blocking permission, it provides read-only visibility into HTTP requests and responses.

What This Means For You

The extension can see the network requests your browser makes, like which images or scripts a page loads. By itself, it can only watch traffic, not change it.

Related APIs

This permission enables access to these Chrome APIs:

chrome.webRequest

Common Use Cases

✓Network analyzers
✓Debugging tools
✓Security monitors

⚠ Red Flags When Combined With

<all_urls>

How to Declare in manifest.json

Add the "webRequest" permission to your extension manifest:

{
  "manifest_version": 3,
  "name": "My Extension",
  "permissions": [
    "webRequest"
  ]
}

Related Permissions

Declarative Net Request

declarativeNetRequest

The extension can block or redirect web requests using rules that Chrome processes internally. This is a more private approach because the extension never sees your actual browsing data.

medium

Declarative Net Request (Host Access)

declarativeNetRequestWithHostAccess

This is a safer version of an ad-blocker that only works on the specific websites you choose. It protects your privacy by letting the browser handle the filtering, ensuring the extension does not see your sensitive information.

medium

Declarative Net Request Feedback

declarativeNetRequestFeedback

The extension can see which of its blocking rules were triggered by specific requests. This helps developers understand why content was blocked or allowed.

medium

Web Request Blocking

webRequestBlocking

The extension can block, redirect, or modify any request your browser makes before it happens. This is how ad blockers work, but it also means the extension controls what data reaches websites.

high

Web Request Auth Provider

webRequestAuthProvider

The extension can automatically provide usernames and passwords when websites request them through browser popup dialogs. This is useful for corporate proxies or secured intranet sites.

high