Forum Discussion

alexbond's avatar
alexbond
Copper Contributor
Sep 14, 2020
Solved

Edge Beta v86 broke policies for WebView2

I see that after the update of Edge Beta to v86, the policies set in registry no longer work for Webview2-based browsers. E.g. I can freely download files on the browser despite DownloadRestrictions set to 3 (block all). 

Yet, there is no such problem with v85 (Stable channel), or when using standalone Edge Beta v86, policies are respected.

 

Is this a bug?

  • alexbond 

     

    Like LingAmy mentioned, this is by design. We believe that apps and browsers are separate scenarios, and admin usually doesn't know what is WebView2 or what apps use WebView2 (it's an implementation details to app). As Ling said, we want to prevent cases such as admin turning off JavaScript in Edge and then realizing in horror that a seemingly random set of apps on the device are broken because they use WebView2 and JavaScript underneath. 

     

    Specifically to your comment about "Webview2-based browsers", these apps that are built on top of the browser. We recommend developers owning these apps to expose their own policies to control WebView2 download behavior, or admins can block those apps from installing if they are malicious.

    • liminzhu's avatar
      liminzhu
      Icon for Microsoft rankMicrosoft

      alexbond 

       

      Like LingAmy mentioned, this is by design. We believe that apps and browsers are separate scenarios, and admin usually doesn't know what is WebView2 or what apps use WebView2 (it's an implementation details to app). As Ling said, we want to prevent cases such as admin turning off JavaScript in Edge and then realizing in horror that a seemingly random set of apps on the device are broken because they use WebView2 and JavaScript underneath. 

       

      Specifically to your comment about "Webview2-based browsers", these apps that are built on top of the browser. We recommend developers owning these apps to expose their own policies to control WebView2 download behavior, or admins can block those apps from installing if they are malicious.

      • alexbond's avatar
        alexbond
        Copper Contributor

        Thank you liminzhu and LingAmy 

         

        with that, can you point to the WebView2 API that allows to block downloads on the WebView2-based browser, so I can implement my own policy on that?

Resources