Jump to content

Google begins barring browser plug-ins from Chrome


Recommended Posts


Reliant on plug-ins like Silverlight, Unity, and Java? Make plans to move on or change browsers, because most plug-ins will be banned from Chrome in the next year.

In case it wasn't clear before, a Google decision has shown the writing is on the wall for plug-ins such as Java and Silverlight that for years have been used to extend what browsers can do.

Starting in January 2014, Google will ban all but the most widely used browser plug-ins in favor of programming methods that use standards built directly into the Web, Chrome security engineer Justin Schuh announced in a blog post Monday. And those plug-ins will be barred "over the coming year," he said.

Most Chrome plug-ins (not to be confused with the lighter-weight add-on option called extensions) use a technology that predate Google's browser by years: the Netscape plug-in application programming interface, or NPAPI. Chrome, unique among browsers, has a second interface called Pepper (PPAPI) that isn't affected by the change -- and that's how Google connects Adobe Systems' Flash Player, by far the most widely used plug-in.

"The Web has evolved. Today's browsers are speedier, safer, and more capable than their ancestors," Schuh said. "Meanwhile, NPAPI's '90s-era architecture has become a leading cause of hangs, crashes, security incidents, and code complexity. Because of this, Chrome will be phasing out NPAPI support over the coming year."

The move is the newest step to move beyond an earlier era of browser development, when Internet Explorer 6 ruled the roost and much online innovation moved to plug-ins such as Flash Player. Microsoft already banned most plug-ins from Internet Explorer when running in Windows 8's newer touch-focused interface.

The company said it will "temporarily whitelist" these popular plug-ins on Chrome to run through NPAPI starting in January 2014:

• Silverlight (which Google said was launched by 15 percent of Chrome users in the last month, though not necessarily used by them)

• Unity (launched by 9.1 percent)

• Google Earth (9.1 percent)

• Java (8.9 percent)

• Google Talk (8.7 percent)

• Facebook Video (6.0 percent)

And of that list of most-popular NPAPI plug-ins, Java is already blocked by default for security reasons.

Microsoft chose to enable Flash Player in Windows 8 through an exceptional procedure. Google also gets some special favors of its own, Google's PDF reader and Native Client plug-ins also use the Pepper API.


Link to comment
Share on other sites

  • Replies 2
  • Views 2.1k
  • Created
  • Last Reply

Top Posters In This Topic

  • Dodel


  • Matsuda


  • LiLmEgZ


Top Posters In This Topic

There's nothing wrong with Java, well o.k it has it's issues, but hey so does windows, unix and a plethora of other software in everyday use.

Java is only being exploited to the level it is as it's deployed on most systems, what happens if everyone moves away from Java ?, simple really.. whoever finds / uses the exploits will simply move onto the next bit of software in the chain.


Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Create New...