555336 - Use the virus scanning services on downloaded XPIs

Status: RESOLVED INACTIVE

(Toolkit :: Add-ons Manager, defect, P3)

Description

[Dave Townsend [:mossop]]

Once we've downloaded an XPI we should scan it for viruses like the download manager does.

Comment 1

[:Gavin Sharp [email: [e-mail]]]

I wonder (with very little idea of how feasible this is) whether the XPI downloads should just go through the download manager, which would then handle this automatically. Is that something you've considered?

Comment 2

[Dave Townsend [:mossop]]

It's something I considered at one point and then rejected due to it not being able to handle what I wanted to do at the time. I think some of those problems have changed now though so we could revisit that I guess.

Comment 3

[Wes Kocher (:KWierso) (Not reading bugmail; email directly if needed)]

So would bug 555753 be a dupe of this? Or vice versa?

Comment 4

[Dave Townsend [:mossop]]

(In reply to comment #3)
> So would bug 555753 be a dupe of this? Or vice versa?

No. Fixing bug 555753 would fix this. But if bug 555753 doesn't get fixed then we would need to do something else to support scanning downloaded XPIs

Comment 5

[BMO Automation]

Per policy at https://wiki.mozilla.org/Bug_Triage/Projects/Bug_Handling/Bug_Husbandry#Inactive_Bugs. If this bug is not an enhancement request or a bug not present in a supported release of Firefox, then it may be reopened.