allo- / ffprofile

A tool to create firefox profiles with personalized defaults.
GNU Affero General Public License v3.0
769 stars 56 forks source link

Enable Addons on Mozilla Websites #221

Open allo- opened 3 years ago

allo- commented 3 years ago

For security reasons, Firefox does not use addons on certain Mozilla websites. When someone knows the risk, he may decide to rather risk addons manipulating, e.g., the addons.mozilla.org page than browse the site without his security extensions.

This setting should have an explanation about the risk, as Mozilla probably does this to make sure users are able to uninstall malicious addons.

https://www.ghacks.net/2017/10/27/how-to-enable-firefox-webextensions-on-mozilla-websites/

serj-kzv commented 2 years ago

Also it is need to add a notice that says something like "Despite you can enable addons for Mozilla sites not every addon will work for these sites because some addons have manually added checking inside to do not let these addons work with Mozilla sites."

allo- commented 2 years ago

This would be mostly an addon issue and the addon developer should communicate if he added such a exception.

But I am hesitant to add this feature at all. I think Mozilla uses Google analytics on some sites, which is a good reason to allow for example uBlock. On the other hand, the protections allows you to use the AMO site do uninstall malicious addons, even when the addons would try to prevent this, if they had access to the page.