this post was submitted on 04 Jul 2023
352 points (98.6% liked)
Firefox
20340 readers
150 users here now
/c/firefox
A place to discuss the news and latest developments on the open-source browser Firefox.
Rules
1. Adhere to the instance rules
2. Be kind to one another
3. Communicate in a civil manner
Reporting
If you would like to bring an issue to the moderators attention, please use the "Create Report" feature on the offending comment or post and it will be reviewed as time allows.
founded 5 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
“Security concerns” is such a bullshit reason. If an add on is such a security concern, why host it in the first place?
I’m disappointed Mozilla is going down this path, but not surprised.
So allowing any random, possibly compromised, possibly installed by malware, add-on to run during the Firefox account login pages (see the list of URLs in this thread) isn't a security concern to you?
The alternative would be to give addons so little permission that the damage wouldn't matter. Effectively break the whole system, i'm fine with the ignore list.
To me it sounds more like they plan on blocking all addons (other than some whitelist of "trusted" addons) on important pages (like the Google login page maybe?).