chromium/components/policy/resources/templates/policy_definitions/Miscellaneous/SubAppsAPIsAllowedWithoutGestureAndAuthorizationForOrigins.yaml

caption: Allow subApps APIs to be called without prior user gesture or requiring
  user confirmation.
desc: |-
  For security reasons, the
  <ph name="SHOW_SUBAPPS_APP_API_NAME">subApps.add()</ph>,
  <ph name="SHOW_SUBAPPS_REMOVE_API_NAME">subApps.remove()</ph> and
  <ph name="SHOW_SUBAPPS_LIST_API_NAME">subApps.list()</ph> web APIs
  require a prior user gesture ("transient activation") to be called or will
  otherwise fail. In addition, the user will be requested to confirm the
  operation via a confirmation dialog.

  With this policy set, admins can specify origins on which these APIs can be
  called without prior user gesture, nor asking the user for confirmation.

  For detailed information on valid url patterns, please see
  https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is
  not an accepted value for this policy.

  If this policy is unset, all origins will require a prior user gesture to call
  these APIs, and will present a confirmation dialog to the user.
example_value:
  - https://www.example.com
  - '[*.]example.edu'
features:
  dynamic_refresh: true
  per_profile: true
owners:
  - file://chrome/browser/web_applications/OWNERS
  - [email protected]
schema:
  items:
    type: string
  type: array
supported_on:
  - chrome_os:123-
future_on:
  - fuchsia
tags: []
type: list