Meet declarative device management

RSS for tag

Discuss the WWDC21 session Meet declarative device management.

Posts under wwdc21-10131 tag

5 Posts

Post

Replies

Boosts

Views

Activity

declarativeNetRequest does not work in Gmail
I'm not sure what is special about Gmail, but my declarativeNetRequest rules are totally ignored. I make an web extension that blocks email trackers (1x1 pixel images embedded in emails to track if and when you open email sent to you). All images in Gmail are loaded through Google's proxy: googleusercontent.com/proxy/#originalURL But no matter what I do, I can't block a single image that is loaded in an email. To try and prove it is a bug in Safari, I created a new template web extension in Xcode. I block all resourceTypes (images and other should be all that is needed) and added two rules: Block all images loaded through Google's proxy server (this should block all embedded images in all emails) Block any image with copper in the URL (just in case the blocking doesn't apply to the proxy root url for some reason).  {   "id": 1,   "priority": 1,   "action": { "type": "block" },   "isUrlFilterCaseSensitive": false,   "condition": {    "regexFilter": "googleusercontent.com/proxy",    "resourceTypes": [     "image",     "media",     "main_frame",     "sub_frame",     "stylesheet",     "script",     "font",     "xmlhttprequest",     "ping",     "websocket",     "other"    ]   }  },  {   "id": 2,   "priority": 1,   "action": { "type": "block" },   "isUrlFilterCaseSensitive": false,   "condition": {    "regexFilter": "copper",    "resourceTypes": [     "image",     "media",     "main_frame",     "sub_frame",     "stylesheet",     "script",     "font",     "xmlhttprequest",     "ping",     "websocket",     "other"    ]   }  } ] Even though I know this isn't needed, I also added the requester domain (mail.google.com) and the proxy domain (googleusercontent.com) to the permissions list in the manifest file: ... "declarative_net_request": {    "rule_resources": [{      "id": "ruleset_1",      "enabled": true,      "path": "rules.json"     }]   },  "permissions": [    "declarativeNetRequest",    "*://mail.google.com/*",   "*://*.googleusercontent.com/proxy/*" ] If I open an email from copper, the image still loads in Gmail If I right click and select "Open Image in New Tab", the image will not load and I am told it was blocked If I open a test page that has two images in it, one the image from the email, the image is blocked and the other image is not (as expected, the second image is from wikipedia and should not be blocked) Running the same extension in Chrome DOES block the image in Gmail (and in all the other cases too)
3
0
1.9k
Nov ’23
How the declarations are applied on the device?
Currently, it seems like the declarations present in the declaration manifest are downloaded one by one and then processed (installed & activated). After this, a single status report that contains the status of all declarations that were processed would be sent to the server. Does the processing of the downloaded declaration happen immediately after they all are downloaded or is it attempted periodically? or both? Is it possible to receive multiple status reports that might contain the status of a subset of declarations downloaded? Is there a way or plan to support the download of multiple declarations in a single request? Is there a way or plan to send a download URL to the device for downloading a declaration? These answers would help us in designing our MDM server better.
0
0
407
Nov ’21
On demand way to get status report from the device
As part of declarative management, a status report would be sent by the device whenever there is a state change. If for some reason, the server missed saving this status report, is there a way to get the entire status (snapshot) of the device? So that the server has a way to recover through an on-demand request or any other similar mechanism. During intermittent network issues, if the device could not connect to the server to send the status report, would there be a retry mechanism to attempt to send the status whenever the connection with the server is successful?
0
0
432
Nov ’21
How would applications be managed through declarations?
The declarative device management video demonstrates how today's profile management can be achieved through configuration type declaration. I'm interested and curious to know about the plans for mechanisms to manage applications through declarations. I'm wondering if there could be a new type of declaration for managed applications or would it be accommodated with the existing type of declarations (say, assets or configuration)?
1
0
629
Sep ’21
declarativeNetRequest does not work in Gmail
I'm not sure what is special about Gmail, but my declarativeNetRequest rules are totally ignored. I make an web extension that blocks email trackers (1x1 pixel images embedded in emails to track if and when you open email sent to you). All images in Gmail are loaded through Google's proxy: googleusercontent.com/proxy/#originalURL But no matter what I do, I can't block a single image that is loaded in an email. To try and prove it is a bug in Safari, I created a new template web extension in Xcode. I block all resourceTypes (images and other should be all that is needed) and added two rules: Block all images loaded through Google's proxy server (this should block all embedded images in all emails) Block any image with copper in the URL (just in case the blocking doesn't apply to the proxy root url for some reason).  {   "id": 1,   "priority": 1,   "action": { "type": "block" },   "isUrlFilterCaseSensitive": false,   "condition": {    "regexFilter": "googleusercontent.com/proxy",    "resourceTypes": [     "image",     "media",     "main_frame",     "sub_frame",     "stylesheet",     "script",     "font",     "xmlhttprequest",     "ping",     "websocket",     "other"    ]   }  },  {   "id": 2,   "priority": 1,   "action": { "type": "block" },   "isUrlFilterCaseSensitive": false,   "condition": {    "regexFilter": "copper",    "resourceTypes": [     "image",     "media",     "main_frame",     "sub_frame",     "stylesheet",     "script",     "font",     "xmlhttprequest",     "ping",     "websocket",     "other"    ]   }  } ] Even though I know this isn't needed, I also added the requester domain (mail.google.com) and the proxy domain (googleusercontent.com) to the permissions list in the manifest file: ... "declarative_net_request": {    "rule_resources": [{      "id": "ruleset_1",      "enabled": true,      "path": "rules.json"     }]   },  "permissions": [    "declarativeNetRequest",    "*://mail.google.com/*",   "*://*.googleusercontent.com/proxy/*" ] If I open an email from copper, the image still loads in Gmail If I right click and select "Open Image in New Tab", the image will not load and I am told it was blocked If I open a test page that has two images in it, one the image from the email, the image is blocked and the other image is not (as expected, the second image is from wikipedia and should not be blocked) Running the same extension in Chrome DOES block the image in Gmail (and in all the other cases too)
Replies
3
Boosts
0
Views
1.9k
Activity
Nov ’23
How to become a developer of MDM
How to become a developer of MDM (such as jamf), what development level development account is required, the qualification requirements for enterprises, and the combination of MDM and ABM to get through the interface. Thank you very much for whether there are relevant documents.
Replies
0
Boosts
0
Views
591
Activity
Dec ’21
How the declarations are applied on the device?
Currently, it seems like the declarations present in the declaration manifest are downloaded one by one and then processed (installed & activated). After this, a single status report that contains the status of all declarations that were processed would be sent to the server. Does the processing of the downloaded declaration happen immediately after they all are downloaded or is it attempted periodically? or both? Is it possible to receive multiple status reports that might contain the status of a subset of declarations downloaded? Is there a way or plan to support the download of multiple declarations in a single request? Is there a way or plan to send a download URL to the device for downloading a declaration? These answers would help us in designing our MDM server better.
Replies
0
Boosts
0
Views
407
Activity
Nov ’21
On demand way to get status report from the device
As part of declarative management, a status report would be sent by the device whenever there is a state change. If for some reason, the server missed saving this status report, is there a way to get the entire status (snapshot) of the device? So that the server has a way to recover through an on-demand request or any other similar mechanism. During intermittent network issues, if the device could not connect to the server to send the status report, would there be a retry mechanism to attempt to send the status whenever the connection with the server is successful?
Replies
0
Boosts
0
Views
432
Activity
Nov ’21
How would applications be managed through declarations?
The declarative device management video demonstrates how today's profile management can be achieved through configuration type declaration. I'm interested and curious to know about the plans for mechanisms to manage applications through declarations. I'm wondering if there could be a new type of declaration for managed applications or would it be accommodated with the existing type of declarations (say, assets or configuration)?
Replies
1
Boosts
0
Views
629
Activity
Sep ’21