Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Extension doesn't work in "tiles/Top page". #28

Open
MasterLive013 opened this issue Apr 2, 2021 · 6 comments
Open

Extension doesn't work in "tiles/Top page". #28

MasterLive013 opened this issue Apr 2, 2021 · 6 comments

Comments

@MasterLive013
Copy link

It also doesn't work when trying to open a bookmark. I ask because I just switched from Waterfox Classic and I could do both of those things with that browser.

@Infocatcher
Copy link
Owner

Modern WebExtensions API doesn't provide access to browser's restricted pages (about:…, chrome://…) and to browser itself. :(
So, this is limitation of all modern extensions.

Only possible to enable on some restricted http/https pages like addons.mozilla.org, in about:config:
privacy.resistFingerprinting.block_mozAddonManager = true
extensions.webextensions.restrictedDomains = "" (empty string, or remove some domains from list)

@Infocatcher
Copy link
Owner

I've updated list of WE-version limitations:
https://github.com/Infocatcher/Right_Links_WE#issues

@MasterLive013
Copy link
Author

That's a shame, but not your fault. Thank you for your prompt response, I have incorporated your suggestions.

@Gitoffthelawn
Copy link
Contributor

@Infocatcher I always leave those 2 settings as defaults, because I do not currently fully understand all the security implications of changing them. The biggest risk seems to be an installed rogue extension to which the user has given the "Access all websites" permission. It could then modify those restricted pages and trick a user into downloading more malware. But, honestly, if they already have rogue code running and it has access to all non-restricted web pages, their browser is completely compromised already. Do you happen to understand all the risks involved? Not that I'm going to change those settings, but it would be good to learn the details if you know them.

@Infocatcher
Copy link
Owner

With online banking & Co there is too many things to stole even without tricking restricted pages like AMO.
Personally I still prefer flexibility over potential risks…

I think, the most important part about secure extensions – is something like manual review, and this part is now skipped in favor of some automated tests during uploading to AMO and signing.
And this one is too hard to implement: a lot of code, a lot of changes to review them all.
And at least should be trusted (and not hacked…) author. And also trusted reviewers.
Anyway, is still good to just look for user reviews. Brain is the better antivirus. :)

@knoajp
Copy link

knoajp commented Mar 21, 2024

It looks like no one has requested such API on Bugzilla yet, right...?
https://bugzilla.mozilla.org/buglist.cgi?quicksearch=bookmarks%20Right%20Links

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

4 participants