1151507 - Warn users when unsigned add-ons have been disabled during startup

Status: VERIFIED FIXED

(Toolkit :: Add-ons Manager, defect, P1)

Description

[Dave Townsend [:mossop]]

This is very similar to bug 1038071, in fact I think we should use the same UI for both, but in some cases we will disable add-ons during startup because they aren't signed. This will happen particularly on the first upgrade to a version that enforces add-on signing.

The patch from bug 1038068 allows us to detect add-ons disabled during startup using AddonManager.getStartupChanges(AddonManager.STARTUP_CHANGE_DISABLED), we can then filter the list of ids returned for add-ons that are unsigned.

Comment 1

[Dão Gottwald [:dao]]

(In reply to Dave Townsend [:mossop] from comment #0)
> This is very similar to bug 1038071, in fact I think we should use the same
> UI for both,

Just to be clear, that's attachment 8598783 [details], right?

Comment 2

[Dave Townsend [:mossop]]

(In reply to Dão Gottwald [:dao] from comment #1)
> (In reply to Dave Townsend [:mossop] from comment #0)
> > This is very similar to bug 1038071, in fact I think we should use the same
> > UI for both,
> 
> Just to be clear, that's attachment 8598783 [details], right?

Yes that's right

Comment 3

[Dão Gottwald [:dao]]

Attachment: patch

Comment 4

[Pulsebot]

https://hg.mozilla.org/integration/fx-team/rev/dbec5281f625

Comment 5

[Phil Ringnalda (:philor)]

https://hg.mozilla.org/mozilla-central/rev/dbec5281f625

Comment 6

[Vasilica Tamas, QA [:vtamas]]

I have tested this bug based on https://bug1148403.bugzilla.mozilla.org/attachment.cgi?id=8598783 and here is what I have noticed:
   1. The yellow warning bar is not displayed after the browser is restarted
   2. The yellow triangle from “Some extensions could not be verified” button misses: http://i.imgur.com/m4uIX9i.jpg
   3. It is not specified, in the explanation text, where you can find signed add-ons. The addons.mozilla.org site is opened when you click on “find replacements” link: http://i.imgur.com/TnzlONI.jpg


I tested applying 2 methods and the results were the same in both cases.
   1. Following the steps mentioned in https://bugzilla.mozilla.org/show_bug.cgi?id=1148403#c47
   2. Creating a profile using a release version of Firefox (e.g Firefox 38.0.5) -> Creating xpinstall.signatures.required=true in about:config -> Adding an unsigned add-on -> Closing Firefox -> Opening Nightly/Aurora using the same profile  

Tested using Firefox 40.0a2 (2015-06-08) and Firefox 41.0a1 (2015-06-08) under Windows 7 64-bit and Ubuntu 14.04 32-bit.

Based on the above mentions should I reopen this bug or file separate ones?

Comment 7

[Dave Townsend [:mossop]]

Probably better for tracking purposes to file a new bug at this point

Comment 8

[Dave Townsend [:mossop]]

(In reply to Vasilica Mihasca, QA [:vasilica_mihasca] from comment #6)
> I have tested this bug based on
> https://bug1148403.bugzilla.mozilla.org/attachment.cgi?id=8598783 and here
> is what I have noticed:
>    1. The yellow warning bar is not displayed after the browser is restarted
>    2. The yellow triangle from “Some extensions could not be verified”
> button misses: http://i.imgur.com/m4uIX9i.jpg

Minor UI issue, let's just get a bug on file for it but it's not a high priority.

>    3. It is not specified, in the explanation text, where you can find
> signed add-ons. The addons.mozilla.org site is opened when you click on
> “find replacements” link: http://i.imgur.com/TnzlONI.jpg

I'm not sure I understand this. You say the link does go to addons.mozilla.org and that sounds correct to me. What else are you expecting here?

> I tested applying 2 methods and the results were the same in both cases.
>    1. Following the steps mentioned in
> https://bugzilla.mozilla.org/show_bug.cgi?id=1148403#c47
>    2. Creating a profile using a release version of Firefox (e.g Firefox
> 38.0.5) -> Creating xpinstall.signatures.required=true in about:config ->
> Adding an unsigned add-on -> Closing Firefox -> Opening Nightly/Aurora using
> the same profile

These two cases produce different behaviours for me so I filed bug 1172708 and bug 1172710

Comment 9

[Vasilica Tamas, QA [:vtamas]]

(In reply to Dave Townsend [:mossop] from comment #8)

> Minor UI issue, let's just get a bug on file for it but it's not a high
> priority.
  
 I filed Bug 1172835

> >    3. It is not specified, in the explanation text, where you can find
> > signed add-ons. The addons.mozilla.org site is opened when you click on
> > “find replacements” link: http://i.imgur.com/TnzlONI.jpg
> 
> I'm not sure I understand this. You say the link does go to
> addons.mozilla.org and that sounds correct to me. What else are you
> expecting here?

 Based on mockup the explanation text should be: The following add-ons have not been verified for use in Firefox. You can find replacements at addons.mozilla.org or ask the add-on developer to get them verified. 
Actually it is: The following add-ons have not been verified for use in Firefox. You can find replacements or ask the developer to get them verified. 

Do you see the difference? I vote for the mockup version because it is clearly specified which site is the official one.   In the current version, when you click on find replacements link, you do not know what site will be opened.  

What do you think?

Comment 10

[Dave Townsend [:mossop]]

Ah yeah I see the difference. I filed bug 1173079.

Comment 11

[Vasilica Tamas, QA [:vtamas]]

Based on my previous testing from Comment 6 and on my recent testing on Mac OS X 10.9.5 using Firefox 40.0a2 (2015-06-10) and Firefox 41.0a1 (2015-06-10), I am marking this bug as Verified since the other issues are tracked separately.