Add SmartScreen as origin feature to TrustedOriginSetting spec#5596
Open
GittyHarsha wants to merge 3 commits into
Open
Add SmartScreen as origin feature to TrustedOriginSetting spec#5596GittyHarsha wants to merge 3 commits into
GittyHarsha wants to merge 3 commits into
Conversation
Contributor
GittyHarsha
commented
May 19, 2026
GittyHarsha
commented
- Add COREWEBVIEW2_ORIGIN_FEATURE_SMART_SCREEN enum with documentation describing per-origin SmartScreen reputation check configuration.
- Update C++, .NET examples and MIDL3 enum to include SmartScreen.
Add COREWEBVIEW2_ORIGIN_FEATURE_SMART_SCREEN enum with documentation describing per-origin SmartScreen reputation check configuration. Update C++, .NET examples and MIDL3 enum to include SmartScreen. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Contributor
There was a problem hiding this comment.
Pull request overview
This PR extends the TrustedOriginSetting specification to allow per-origin configuration of SmartScreen reputation checks, updating the associated Win32/C++ and .NET/WinRT examples and the MIDL3 enum to include the new origin feature.
Changes:
- Adds
COREWEBVIEW2_ORIGIN_FEATURE_SMART_SCREEN/CoreWebView2OriginFeature.SmartScreenas a configurable origin feature. - Updates C++ and .NET examples to demonstrate configuring SmartScreen per-origin.
- Expands spec documentation for SmartScreen behavior and updates
SetOriginFeaturesdocs to mention it.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
Comment on lines
+222
to
+228
| /// This configuration operates within the scope of the global SmartScreen toggle | ||
| /// controlled by `ICoreWebView2Settings8.IsReputationCheckingRequired`. | ||
| /// When `IsReputationCheckingRequired` is `false` (SmartScreen globally | ||
| /// disabled), the SmartScreen check is not active and this | ||
| /// per-origin configuration has no effect. When `IsReputationCheckingRequired` | ||
| /// is `true` (the default), this per-origin configuration controls whether | ||
| /// individual origins are exempt from SmartScreen reputation checks. |
| /// URLs and downloaded files against a cloud-based reputation service. | ||
| /// By default, SmartScreen is enabled for all origins. Setting this feature to | ||
| /// `Disabled` for an origin will skip SmartScreen reputation checks for | ||
| /// navigations and downloads from that origin, effectively allow-listing it. |
Contributor
There was a problem hiding this comment.
This is a good suggestion.
david-risney
approved these changes
May 19, 2026
Contributor
david-risney
left a comment
david-risney
left a comment
There was a problem hiding this comment.
This is good, but please also address the comment about adding a note about security when disabling - that we only want to do this for known and trusted sites.
- Replace hardcoded ICoreWebView2Settings8 reference with link to IsReputationCheckingRequired docs, describe as per-WebView setting - Add security warning about disabling SmartScreen only for trusted origins - Restore COREWEBVIEW2_ORIGIN_FEATURE_STATE doc comment Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
GittyHarsha
force-pushed
the
user/harshanp/origin-settings-add-smartscreen
branch
from
a6c9e08 to
60c61d5
Compare
…quired internals Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
GittyHarsha
force-pushed
the
user/harshanp/origin-settings-add-smartscreen
branch
from
0ab4c9e to
cc3a119
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.