Give admins the ability to add trusted sites

[stbeep1]

Prerequisites

• ✔️ I verified that this is not a filter issue
  • Filter issues MUST be reported at filter issue tracker
• ✔️This is not a support issue or a question
  • Support issues and questions are handled at /r/uBlockOrigin
• ✔️I performed a cursory search of the issue tracker to avoid opening a duplicate issue
  • Your issue may already be reported.
• I tried to reproduce the issue when...
  • uBlock Origin is the only extension
  • uBlock Origin with default lists/settings
  • using a new, unmodified browser profile
• I am running the latest version of uBlock Origin
• I checked the documentation to understand that the issue I report is not a normal behavior

Description

Just stumbled while implementing policy settings to start pushing out uBO to replace ABP across all our Chromebooks and Windows 10 laptop. With a little fiddling, was able to push multiple settings and the netWhitelist with multiple domains. One question, though, is if there's a way to push out whitelist domains that doesn't replace the user's whitelist settings? When I push out a couple domains via the netWhitelist value, it replaces the entire list rather than appending/updating existing ones.
Also, Sometimes I want to whitelist a website for my users, but I wanted to allow them to whitelist other websites. Currently, the policies that I can config in admin consle we're extremely limited for uBO. Cloud you release more chrome://policy on uBO??

Your environment

• uBlock Origin version: v1.31.2
• Browser Name and version: Google Chrome 85
• Operating System and version: both Windows 10 (2004) and Chrome OS 85.

[gorhill]

I will try to add support for this today in dev build.

[stbeep1]

I will try to add support for this today in dev build.

Huge thanks.

[gorhill]

The new policy is extraTrustedSiteDirectives (available in 1.32.5b4+), an array of strings, each of which must be a valid directive as per documentation.

These extra trusted-site directives are appended to a user's own directives at every launch, and are considered by uBO as default directives, i.e. they will be rendered as such in the editor.

[stbeep1]

Well the other problem is that even we forced installed uBO via google admin console and pushed out the settings, end users can still change them when they want. I can describe this as 08:00AM we pushed out the settings then users mess around in the settings page, *they can still change the settings unless they reboot their devices. So that, I said it's limited for us. What do you think about that? @gorhill

Side note: uBO is still my still my favourite Chrome extensions since 2015. I am not a uBO haters or any things related to "let uBO moves into business oriented [movement] guy" that kind of thing. As I totally agree the perspective/idea of the uBO team. I enjoy and love using uBO everyday.

[stbeep1]

@gorhill @uBlock-user Cloud you comments on that please?

Well the other problem is that even we forced installed uBO via google admin console and pushed out the settings, end users can still change them when they want. I can describe this as 08:00AM we pushed out the settings then users mess around in the settings page, *they can still change the settings unless they reboot their devices. So that, I said it's limited for us. What do you think about that?

[gorhill]

Be specific. What exact settings do you want to be read-only? I can comment and/or act only on specifics. I consider the issue here solved, you specifically asked for ability to add trusted-site directives to a user's own set, which is what I fixed. For more, open distinct issues for specific settings and what you want about them as admin.

[stbeep1]

Got it. I will create a new issue.

[crimsonmt]

This functionality would be great, looking forward to implement, currently on version 1.37.2 trying to deploy this via GPO but unsuccessful. Any tricks to getting this push via GPO if at all possible.

[gorhill]

You can add trusted sites already, read the wiki, and specifically https://github.com/uBlockOrigin/uBlock-issues/wiki/Deploying-uBlock-Origin:-configuration#trustedsitedirectives-1.