Security change to manifest.json

lkosson / full-address-column

Thunderbird add-on to show full sender and recipient address column in message list

MIT License

39 stars 11 forks source link

Security change to manifest.json #9

Closed nxnlvz closed 2 months ago

nxnlvz commented 2 years ago

Only request what is required.

lkosson commented 2 years ago

I don't think that changes anything. The addon uses experiment_apis which implicitly grants full access permission. I believe there is no way to read full message headers and modify message list pane using built-in APIs with fine-grained permissions. Even with just messagesRead, Thunderbird shows the addon has full access to local computer.

lkosson commented 2 months ago

Not applicable after changes in Thunderbird 115