Is there a list of manifest keys that triggers the security pop-up for users when changed?
I know changing “permissions” will do that, but adding or changing “optional_permissions” not, right?
Right now I need to add “web_accessible_resources” key and I want to be sure this will not cause any issues.
Adding web_accessible_resources will not trigger any permission prompt.
For Optional permissions, permission prompt will be triggered only when permission.request() is called in your code. Also you will be able to use API mentioned in optional permissions only when you request permission.
overriding new tab page will trigger “Your New Tab has changed” message
overriding homepage will trigger “Your homepage has changed” message
apart from requesting “tabHide” permission, the actual usage of this API (hiding a tab) will trigger another message: “Access your hidden tabs”
All of these messages has a button to disable add-on!
And a bonus one: using " chrome_settings_overrides" to add a “search_provider” with option “is_default” will ask user whether he wants to change the the default search engine - there are only Yes / No buttons.