AI product readEnterprise download security: blocks HTML Smuggling attacks and other unwanted file downloads based on configurable rules
Protects organizations from HTML Smuggling and other download-based attack vectors by allowing IT administrators to define policies that block, audit, or notify on downloads matching specific criteria (file extension, origin, domain, SHA256 hash, URL scheme)
1) IT admin deploys the extension via Chrome enterprise policy with a JSON configuration defining blocking rules (banned extensions, allowed origins, domain patterns, etc.). 2) The extension injects a content script into all pages to intercept JavaScript-based downloads (HTML Smuggling). 3) When a download is initiated, the background service worker evaluates it against configured rules. 4) Based on the rule match, the extension either blocks the download (cancels/deletes the file), audits it (logs for review), or notifies the user. 5) SHA256 hashes and file inspection data can be used for more granular policy decisions.
Blocks downloads based on file extension, origin (local/server/any), domain, and URL scheme rulesDetects and inspects HTML Smuggling (JavaScript-based blob downloads) via content script injectionComputes SHA256 hashes of downloaded files for integrity checkingSupports file inspection to detect malicious content patterns (e.g., Excel 4.0 macros, VBA macros)Enterprise-managed configuration via Chrome's managed storage policy (schema.json)Native messaging host support for additional file system inspection
- Target users
- Enterprise IT administrators / Security teams deploying managed Chrome browsers / Organizations needing download policy enforcement
- No UI code for end-user configuration visible — all config is via managed storage policy, so full user experience requires enterprise deployment
- The extension is open-source on GitHub but the full documentation is external and not analyzed
MonetizationNo paid features detected
No paid features, subscriptions, licensing, or payment gates exist in the extension. All 'pro' keyword hits are false positives from words like 'process', 'promise', 'properties', 'protocol', 'processing' — none relate to paid tiers. The extension is open-source (GitHub repo linked), uses no payment platforms, and contains no billing/upgrade/licensing logic.
- Confidence
- 95
- Payment platform
- --
- Source
- AI / High
- Login required
- No
- Reason
- No user login or account creation is required to use the extension. All 'session' keyword hits reference chrome.storage.session (Chrome's temporary extension storage API), not user authentication sessions. The schema.json mentions 'Username' and 'Hostname' fields, but these are enterprise-managed policy values pushed via chrome.storage.managed by IT administrators — not user login credentials. There are no OAuth flows, login screens, API keys, or account registration flows in the source code.
Hi Dev, Amazing Extension this what i looking for month, but can i customize the Icon so it can fit to my own Office?
doesn't stop anything from being downloaded, total garbage!!!
No sirve para nada.
An overall great extension I use to keep my addictions in check. However I did notice a flaw. For some reason .exe files from Github can be downloaded despite setting the rules to prevent them downloading. They can be blocked everywhere else but not Github no matter how many times I fiddle with the Config file in the registry.
Many thanks!!! I was looking for any way to block the download of .apk files on my PC and it's working perfectly! {"rules":[{"bannedExtensions":["apk"],"origin":"any"}]}
hi i wanted to ask does this blocks .swf type of malicious downloads ??
For configuring which file extensions you would like to block, create the keys if you don't have them in "Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome\3rdparty\extensions\kippogcnigegkjidkpfpaeimabcoboak\policy" and use a String named "Config" to tweak its JSON configuration settings. It worked very well for me. I would suggest making an additional filter that would block any file (regardless of extension) containing a pattern (like every single file with the name *chrome* somewhere in its name) Otherwise excellent job.