W3C home > Mailing lists > Public > whatwg@whatwg.org > February 2011

[whatwg] Proposal for IsSearchProviderInstalled / AddSearchProvider

From: David Levin <levin@chromium.org>
Date: Mon, 14 Feb 2011 13:34:27 -0800
Message-ID: <AANLkTimajEu0YN95kUqKkPuozFWKkTr5KUUW052yO9dj@mail.gmail.com>
Problem
Although the default search provider may have a significant impact on a
user?s web experience, it isn?t easy for users to set this.

Ideally, a search engine should be able to offer the user the ability to
easily use it as the default. Currently, there are two obstacles to this:
1. The search engine may not be able to detect that it already is the
default, so it would offer this too broadly.
2. When a user decides to use it, they have to follow a set of complex
instructions (http://www.google.com/search?q=switch+default+search+engines)

Proposal
Add two apis to window.external:
  IsSearchProviderInstalled
  AddSearchProvider

IsSearchProviderInstalled(string url) returns
  * 2 if the origin in the given url is the default search provider
  * 1 if the origin in the given url is a search provider but not the
default.
  * 0 otherwise
If the given url doesn?t have the same security origin as the page, this api
throws an access denied exception. (This makes the url redundant but it is
kept to be consistent with the method exposed by IE 7.)

AddSearchProvider(string openSearchUrl, [optional] bool asDefault) retrieves
the open search document from openSearchUrl and decides in a UA specific
manner whether to prompt the user about the change or addition.

FAQ
Doesn?t this already exist?
Both of these api?s are present in IE7 (and later) except for the additional
argument to AddSearchProvider (asDefault) and a change in the url's that may
be queried. The pair of apis aren?t in a standard or many of the other
browsers.

Won?t the InstallSearchProvider api get abused?
The home page setting for users has a similar value. Yet, the SetHomePage
api available in IE does not seem to be abused significantly. Largely this
will depend on the UA providing appropriate measures to protect users. In
Chromium, we rely on a combination of user gesture (click, etc.) plus a
dialog which clearly explains what is going to happen with the default being
that nothing is changed (
https://sites.google.com/a/chromium.org/dev/developers/design-documents/chromium-search-provider-js-support
).

Thanks,
dave
Received on Monday, 14 February 2011 13:34:27 UTC

This archive was generated by hypermail 2.4.0 : Wednesday, 22 January 2020 16:59:30 UTC