Script to Silently Install Browser Extensions?

[GabeShack]

Hey all,
So in setting up class link, I need to be able to push an extension to all managed computers in Safari, Firefox and Chrome. Chrome we can push it once they log in with their google account, but I'm not finding anything with Safari or Firefox that allows the installation of extensions remotely.

Anyone have any thoughts?

Gabe Shackney
Princeton Public Schools

[GabeShack]

@mm2270 @bentoms I think one of you had something at one point that could work for this, but it sounds like a keychain is needing to be created for Safari to actually see that the user allowed and trusted the extension.

Gabe Shackney
Princeton Public Schools

[mm2270]

@gshackney @bentoms definitely had/has something written up around Safari extensions and pushing those through Jamf, but if my memory serves me, this is no longer an option after Apple put the kibosh on that with new security restrictions. Safari extz can no longer be packaged up and deployed to clients. They have to come from and be installed from the approved Apple Safari extensions page now.

I can't help you with Firefox add-ons as I really don't use add ons with it.

[GabeShack]

Thanks! I kinda figured as much. Since we are going to continue on 10.12.6 for this year I hoped that we could still bypass that security piece. I think I have Firefox worked out for computers getting re imaged, its just trying to push it to staff with existing preferences thats difficult. I guess I will make a self service piece.

Gabe Shackney
Princeton Public Schools

[sanbornc]

@gshackney Was a solution ever found for this? Im trying to push a Firefox Extension.

[GabeShack]

I bundled it up using composer for new users. Didn’t find a good way to deal with existing users though.

Gabe Shackney
Princeton Public Schools

[JasonAtCSUMB]

You want to install Chrome extensions using Chrome policies: https://cloud.google.com/docs/chrome-enterprise/policies/?policy=ExtensionInstallForcelist

For Firefox, you want to use the distribution directory described here https://support.mozilla.org/en-US/kb/deploying-firefox-with-extensions. Also see https://blog.mozilla.org/addons/2019/10/31/firefox-to-discontinue-sideloaded-extensions/

I gave up on trying with Safari's keychain.

[taugust04]

Yes, I would expect side loading of extensions, without some sort of default setting modification in the browser, to go away due to security risks in all major browsers over the next two years. It's an easy way to insert malware payloads. Also, some vendors are taking advantage of these extension loading loopholes as well:

https://arstechnica.com/gadgets/2020/01/microsofts-sneaky-plan-to-switch-chrome-searches-from-google...

These sort of abuses are why we can't have nice things.