1021234 - installing packaged app from domain not listed in installs_allowed_from silently fails

Status: RESOLVED INVALID

(Firefox Graveyard :: Web Apps, defect)

Description

[Bill Walker [:bwalker] [@wfwalker]]

STR:

1. Find a Marketplace packaged app whose installs_allowed_from is not "*" (example: https://marketplace.firefox.com/app/line)
2. Create a web page that invokes mozApps.installPackage on that app
3. Host that page on a domain not listed in installs_allowed_from
4. Try to install

Expected results:

The onerror() callback is invoked with some message about origin denied

Actual results:

Install appears to succeed but no app appears in application folder. Neither success nor error callback is ever invoked.

Comment 1

[Marco Castelluccio [:marco]]

Attachment: Test page

The update manifest doesn't specify installs_allowed_from, so the |onsuccess| callback of |installPackage| is successfully called. Then, when the package is downloaded, the |ondownloaderror| callback of the app object is called with INSTALL_FROM_DENIED.

Comment 2

[Marco Castelluccio [:marco]]

(This is the expected behavior of the API)