Abstract: Systems and methods for enabling access to a web application are provided. In some aspects, a method includes determining a first profile to be used for accessing the web application, generating a first access point based on the first profile, enabling automatic access to the web application under the first profile via the first access point, and determining a second profile to be used for accessing the web application. The second profile is different from the first profile. The method also includes generating a second access point based on the second profile, and enabling automatic access to the web application under the second profile via the second access point.

Abstract: A computer-implemented method executed by at least one processor performs operations for a web browser running a browser process and at least one renderer process on a computing system. The method includes identifying a webview tag in a web page, the web page being associated with the at least one renderer process. The method also includes forking another renderer process responsive to identifying the webview tag, generating a mapping between the at least one renderer process and the other renderer process at the browser process, and using the browser process as an intermediary for communications between the at least one renderer process and the another renderer process based on the mapping.

Abstract: A method can include receiving a static web application at a trusted server, validating assurance characteristics of the static web application, and upon successful validation of the static web application, providing access to the static web application via a URL that identifies the static web application at a trusted server location. The static web application, when executed on the browser running on the client device, can be granted at least one permission to utilize local resources of the client device during execution of the static web application by the browser. Upon receiving a change to an object of the static web application, the validating of the assurance characteristics of the static web application, as a whole, can be performed before the change to the object is made accessible via the URL.

Abstract: According to one general aspect, a computer-implemented method may include receiving, at a server, a request from a computing device for an executable installation file. The executable installation file may be configured, when executed on the computing device, to install a web browser application on the computing device. The request may be associated with a specific network resource location that is hosted by the server. The method may include, in response to receiving the request, obtaining the executable installation file, dynamically incorporating a data file into the executable installation file. The data file may include a browser extension definition for a browser extension corresponding with the specific network resource location. The executable installation file, with the incorporated data file, may be further configured, when executed on the computing device, to install the defined browser extension on the computing device.

Abstract: A computer-implemented method for managing permissions and capabilities for web applications and browser extensions includes receiving via a digital marketplace a request to provide a web application or a web browser extension to a computing device. Based on the request, the web application or the browser extension is provided to a web browser of the computing device. The method includes determining if the digital marketplace is a trusted location for the computing device based on a set of trust criteria, and including additional features of the web application or the browser extension if the digital marketplace is determined to be the trusted location.

Abstract: A computer-implemented method includes setting minimum boundaries for a pop-up window based on content, displaying the content in the pop-up window, receiving an input to change a layout of the content, calculating new minimum boundaries for the pop-up window based on the layout change, resizing the pop-up window using the new minimum boundaries and displaying the content in the resized pop-up window.

Abstract: According to one general aspect, a method of executing a web application installed on an apparatus may include executing, via a processor included by the apparatus, a web browser. The method may include loading, via the web browser, the web application. In some embodiments, the web application may include a manifest and at least a portion of a web site and wherein the web application was packaged as an installable entity. The method may further include managing, by the web browser, the execution of the web application. The method may include accessing, via the web browser, from a local storage medium one or more portions of the web site included by the web application. In some embodiments, the one or more portions of the web site may have been stored in the local storage medium when the web application was installed.

Abstract: A rendering engine may be configured to execute, within a execution environment, a page script of a page to be rendered within a browser interface, the page script configured to interact with a page model to implement the rendering. An extension manager may be configured to execute an extension file which modifies a functionality of a browser application in association with the rendering of the page, including detecting a content script associated with the extension file which, during execution, interacts with the page model. An environment manager may be configured to evaluate the page, for example using a blacklist, prior to execution of the content script by the rendering engine.

Abstract: According to one general aspect, a method may include executing, by a processor of a computing device, a web browser presentation environment. The method may also include presenting at least one web page within a context of the web browser presentation environment, wherein presenting within the web browser presentation environment includes maintaining a first presentation data structure that includes a web browser presentation data structure portion and a common presentation data structure portion. The method may further include receiving a request to move the presentation of the web page from the web browser presentation environment to an emulation-based presentation environment.

Abstract: An extension schema validator may be executable within an extension process of an extension of a browser application, and may be configured to validate the extension with respect to an extension application program interface (API) that is provided in conjunction with the browser application for implementation of the extension. A browser schema validator may be executable within a browser process of the browser application, and may be configured to validate the extension with respect to the extension API. Successful validation of the extension by the extension schema validator prior to attempting validation of the extension by the browser schema validator may be required.

Abstract: A system includes a memory configured to store executable code and a processor operably coupled to the memory. The processor is configured to execute the code to receive a request from a developer of a first web application to provide a notification corresponding to the first web application, authenticate the developer using a client identifier, after authenticating the developer, receive a content of the notification and a first user identifier, and provide the content of the notification to at least one of a plurality of computing devices associated with the first user identifier, based on an account associated with the first user identifier.

Abstract: Methods and apparatus for installing browser extensions are disclosed. An example method includes receiving a browser extension installation package in a main browser process, validating a digital signature of the installation package and launching a sandboxed sub-process of the browser application. The example method includes, in the sandboxed sub-process: respectively transcoding or recoding at least one of the plurality of constituent files, where the transcoded and/or recoded files replace their corresponding original constituent files. The example method includes, after the transcoding and/or recoding, passing the constituent files from the sandboxed sub-process to the main browser process and installing the browser extension to the browser application using the transcoded and/or recoded files.

Abstract: A computer-implemented method includes providing an online marketplace to developers of web applications that may be downloaded from the marketplace to a client computing device for execution by a browser executing on the client device and receiving a request from a party to the marketplace to list a proposed web application for sale in the marketplace. One or more processors of a computer system automatically determine the permissions requested by the proposed web application and automatically determine if the permissions match one or more predetermined permissions. If the permissions match one or more predetermined permissions, then the proposed application is flagged for a manual vetting process before listing the proposed application in the marketplace, and if they do not match, then the proposed application is listed in the marketplace without manual review of the application.

Abstract: A method and system for providing cross system installation of applications, include providing for installation, via a server, a natively operating application coded only with web technologies, and providing for installation a single runtime environment that provides the natively operating application access to computer system-level services that are not available to web applications. The single runtime environment controls the installation and uninstallation of the natively operating application, and the natively operating application is configured to execute independent of a web browser.

Abstract: According to one general aspect, a method of managing a web browser extension by an apparatus may include executing, by a processor included by the apparatus, a web browser. The method may include installing on the apparatus, via the web browser, a web browser extension. In one embodiment, the web browser extension may include at least one web page configured to alter the functionality of the web browser, and a substantially unique identifier (UID) based upon a public encryption key. The method may further include launching, via the web browser, the web browser extension based upon the substantially unique identifier.

Abstract: A runtime environment is provided, which is capable of executing a background application page that persists over a lifetime of a web application. The background application page does not have its own user interface, and the background application page is launched after a web browser is launched. Using a processor of a computing device, the background application page is notified upon receiving an event related to the web application. The background application page is employed to control at least one user interface for an activity page of the web application.

Abstract: A rendering engine may be configured to execute, within a first execution environment, a page script of a page to be rendered within a browser interface, the page script configured to interact with a page model to implement the rendering. An extension manager may be configured to execute an extension file which modifies a functionality of a browser application in association with the rendering of the page, including detecting a content script associated with the extension file which, during execution, interacts with the page model. An environment manager may be configured to create a second execution environment for execution of the content script file therein by the rendering engine.

Abstract: A browser application programming interface is exposed to a web application to verify an identify of a user using user-specific identity information stored by the browser. Cryptographic information associated with the user is transmitted from the browser application programming interface to the web application. User-specific content is provided to the user through the web application if the web application verifies an identify of the user via the browser application programming interface using the cryptographic information.

Abstract: According to one general aspect, a computer-implemented method for implementing default security features for web applications and browser extensions includes receiving a request to include a web application or a web browser extension in a digital marketplace. A determination is made if the web application or the web browser extension conforms to default security features, wherein the default security features include a prohibition against running in-line script on web pages. The web application or the browser extension is included in the digital marketplace if the web application or the browser extension conforms to the default security features.

Abstract: According to one general aspect, a method of presenting to a user a subset of applications that may be executed by a computing device is described. The subset of applications may be selected from a plurality of applications available an online marketplace for such applications. The method may include ranking the applications based on signals relevant to the relative desirability to the user of different applications, wherein at least one of the signals is based on information that is generated outside of the marketplace. The method may further include selecting the subset of applications based on their respective rankings. The method may also include presenting the selected subset to the user.