Setting default security features for use with web applications and extensions

1. A computer-implemented method for implementing default security features for applications, comprising:

receiving a request from a developer of a plurality of developers to include a web application or a browser extension in a digital marketplace, wherein the web application or the browser extension is packaged in a format for distribution via the digital marketplace;

determining if the web application or the browser extension conforms to default security features;

allowing the developer to override one of the default security features if the developer declares the override in the request;

storing the override and a risk level associated with the override in a database of a server;

including the web application or the browser extension in the digital marketplace if the web application or the browser extension conforms to the default security features; and

displaying a notification related to the override prior to allowing a user to download the web application or the browser extension from the digital marketplace.

2. The computer-implemented method of claim 1 , wherein the default security features include a prohibition against running in-line script on web pages.

3. The computer-implemented method of claim 1 , wherein the default security features include a limit on an ability of the web application or the browser extension to run a predetermined JavaScript function.

4. The computer-implemented method of claim 1 , wherein the default security features apply to features of standard web technologies.

5. The computer-implemented method of claim 1 , further comprising:

evaluating, using a set of criteria, a specific request from the developer to override one of the default security features.

6. The computer-implemented method of claim 5 , wherein the specific request is subsquent to the request.

7. The method of claim 1 , wherein the default security feature is a restriction against a predetermined JavaScript function.

8. The computer-implemented method of claim 1 , further comprising:

labeling the override with the risk level.

9. The computer-implemented method of claim 1 , further comprising:

receiving, at the server, an explicit declaration of the override from the developer of the web application or the browser extension.

10. The computer-implemented method of claim 1 , wherein the web application is a packaged web application that may be executed locally on a computing device without access to a network.

11. A non-transitory computer-readable storage medium having recorded and stored thereon instructions that, when executed by a processor of a computer system cause the computer system to:

receive a request, from a developer of a plurality of developers, to include a web application or a browser extension in a digital marketplace, wherein the web application or the browser extension is packaged in a format for distribution via the digital marketplace;

determine if the web application or the browser extension conforms to default security features;

allow the developer to override one of the default security features if the developer declares the override in the request;

store the override and a risk level associated with the override in a database of server;

include the web application or the browser extension in the digital marketplace if the web application or the browser extension conforms to the default security features; and

display a notification related to the override prior to allowing a user to download the web application or the browser extension from the digital marketplace.

12. The non-transitory computer-readable storage medium of claim 11 , further comprising instructions that, when executed by a processor of a computer system cause the computer system to:

limit an ability of the web application or the browser extension to run a predetermined JavaScript function.

13. The non-transitory computer-readable storage medium of claim 11 , further comprising instructions that, when executed by a processor of a computer system cause the computer system to:

evaluate the request from the developer to override one of the default security features.

14. The non-transitory computer-readable storage medium of claim 11 , further comprising instructions that, when executed by a processor of a computer system cause the computer system to:

label the override with the risk level.

15. A system comprising:

a memory configured to store executable code; and

a processing device operably coupled to the memory, the processor configured to execute the code to:

receive a request, from a developer of a plurality of developers, to include a web application or a browser extension in a digital marketplace, wherein the web application or the browser extension is packaged in a format for distribution via the digital marketplace;

determine if the web application or the browser extension conforms to default security features;

allow an override of one of the default security features if the override is declared in the request;

store the override and a risk level associated with the override in a database of a server;

include the web application or the browser extension in the digital marketplace if the web application or the browser extension conforms to the default security features; and

display a notification related to the override prior to allowing a user to download the web application or the browser extension from the digital marketplace.

16. The system of claim 15 , wherein the default security features include a prohibition against running in-line script on web pages.

17. The system of claim 15 , wherein the default security features include a limit on an ability of the web application or the browser extension to run a predetermined JavaScript function.

18. The system of claim 15 , wherein the web application is a packaged web application that may be executed locally on a computing device without access to a network.

19. The system of claim 15 , wherein the processor is further configured to execute the code to: evaluate the request from the developer to override one of the default security features.

20. The system of claim 15 , wherein the processor is further configured to execute the code to: label the override with the risk level.