Search code examples
google-chromegoogle-chrome-extensiongoogle-chrome-app

Constantly getting the rejection - "Due to the Host Permission, your extension may require an in-depth review which will delay publishing."


I am trying to publish the extension to chrome app store. I tried many times but getting rejected every time,

the menifest file is:-

{
  "name": "App name",
  "description": "Blank!",
  "version": "0.0.0.1",
  "manifest_version": 2,
  "icons": {
    "128": "icon.png"
  },
  "background": {
    "page": "background.html",
    "persistent": false
  },
  "browser_action": {
    "default_icon": "icon.png",
    "default_popup": "popup.html",
    "default_title": "Name"
  },
  "content_scripts": [
    {
      "all_frames": true,
      "css": ["css/main.css"],
      "js": [
        "js/jquery-3.1.0.min.js",
        "js/popup.js",
        "main.js",
        "js/dashboard.js"
      ],
      "matches": [
        "*://*.facebook.com/*/*/requests/",
        "*://*.facebook.com/*/*/requests",
        "*://*.facebook.com/*"
      ],
      "run_at": "document_end"
    }
  ],
  "content_security_policy": "script-src 'self' https://apis.google.com 'unsafe-eval'; object-src 'self'",
  "update_url": "https://clients2.google.com/service/update2/crx", 
  "oauth2": {
    "client_id": "xxxxxx-xxxxxxxxxx.apps.googleusercontent.com",
    "scopes": [
      "https://www.googleapis.com/auth/spreadsheets"
    ]
  },
  "permissions": [
    "tabs",
    "storage",
    "notifications",
    "identity",
    "*://*.herokuapp.com/*"
    ],
  "web_accessible_resources": ["*.png"]
}

THe answers that I am submitting is like so-

Permission justification

Error Due to the Host Permission, your extension may require an in-depth review which will delay publishing.

  1. tabs- to get the current tab url or location.
  2. storage - to store the user token for authentication and user specific data.
  3. notifications - to show the messages to the user when they logged in or logged out.
  4. identity - to authorize user using google
  5. Host permission -
    1. https://.facebook.com/ = to get the facebook page URL and get the facebook group Id from the url
    2. https://.facebook.com//*/requests/ = to get the request page inside the facebook and hence to activate the extension feature related to that group
    3. https://.herokuapp.com/ = to access the apis from the backend server and to manage all the basic functionality.
  6. Remote code - Yes, I am using remote code - I have called the google api module (https://apis.google.com) for adding the data to the user's given google sheet.

I have tried more than 5 time in a row, still gets rejects with the same error. Let me know where I am making mistake.


Solution

  • I have found that it's necessary to submit the privacy policy and terms of services links to the chrome store account section.

    Hope it worked for you also.