Chrome Extension Deployment

Deploy the BlueSentinel Chrome extension for browser-level data loss prevention.

Overview

The BlueSentinel Chrome extension provides browser-level protection:

  • File upload blocking — Prevents uploads to cloud storage, email attachments, code repositories
  • Code paste detection — Detects source code pasted into AI tools, pastebins, external sites
  • Domain blocking — Blocks 35+ pre-configured data exfiltration domains
  • Drag-and-drop prevention — Blocks file drag-and-drop to browser windows

Force Installation

The extension is designed to be force-installed via Chrome Enterprise Policy. Users cannot remove or disable it.

Windows (Group Policy)

  1. Open Group Policy Editor (gpedit.msc)
  2. Navigate to: Computer Configuration → Administrative Templates → Google Chrome → Extensions
  3. Set "Configure the list of force-installed apps and extensions"
  4. Add the extension ID with the update URL

macOS (MDM Profile)

Deploy a configuration profile with the com.google.Chrome payload:

xml
<key>ExtensionInstallForcelist</key>
<array>
  <string>EXTENSION_ID;https://your-server:5100/chrome-extension/updates.xml</string>
</array>

Agent-Based Deployment

The DLP agent can also install the Chrome extension automatically via the platform enforcer's install_chrome_extension() method. This is triggered on agent startup and during anti-tamper checks.

Configuration

The extension connects to the same central server as the agent. Its behavior is controlled by the Browser Guard policy settings:

  • Blocked domains — Configurable list of domains where file uploads and pastes are blocked
  • Upload blocking — Block all file uploads or only on specific domains
  • Paste detection — Detect and block source code paste operations
  • Maximum POST size — Block form submissions exceeding the configured threshold (default: 50 KB)

Default Blocked Domains

The extension comes pre-configured to block these domains:

  • Cloud Storage: Google Drive, Dropbox, OneDrive, Mega, WeTransfer, Box
  • Code Sharing: GitHub (uploads), GitLab, Pastebin, Hastebin
  • AI Tools: ChatGPT, Claude, Bard
  • Messaging: WhatsApp Web, Telegram Web, Discord, Slack (file uploads)
  • Email: Gmail (attachments), Outlook Web
  • Social: Facebook, Twitter, LinkedIn (file sharing)

Additional domains can be added via the admin dashboard policy editor.

Verification

After deployment, navigate to chrome://extensions on a managed device. The BlueSentinel extension should appear with:

  • Enabled: Yes
  • Installed by enterprise policy: Yes
  • Remove button: Disabled (greyed out)