Closed Bug 1172198 Opened 9 years ago Closed 9 years ago

Blocklist YouTube Unblocker add-on

Categories

(Toolkit :: Blocklist Policy Requests, defect)

Product:
Toolkit
Component:
Blocklist Policy Requests
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED FIXED
Milestone:
2015-08

People

(Reporter: kmag, Assigned: jorgev)

Details

(Whiteboard: [qa-]) 

Versions of this add-on from 0.5.0.1 through 0.6.10 contain code which update arbitrary files within the add-on after it has been installed. Moreover, the list of files to update and the sources from which to fetch the updates, is retrieved over HTTP URLs.

Since this is a serious security issue, and a violation of multiple AMO policies, affected versions should be blocklisted.

ID: youtubeunblocker@unblocker.yt
There's a new version that has now been approved. I'll block the bad versions in 2 weeks, to ensure most users will have updated to the safe version.
Assignee: nobody → jorge
Blocked: https://addons.mozilla.org/en-US/firefox/blocked/i990
Status: NEW → RESOLVED
Closed: 9 years ago
Resolution: --- → FIXED
Whiteboard: [qa-]
Target Milestone: --- → 2015-08
Product: addons.mozilla.org → Toolkit
You need to log in before you can comment on or make changes to this bug.