1418861 - It seems an addon has set a proxy?

Status: RESOLVED WORKSFORME

(Firefox :: Untriaged, defect)

Description

[Dan]

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0
Build ID: 20171112125346

Steps to reproduce:

I am quite sure that one of the addons I have installed (I deactivated all now, after realizing something changed my proxy setting in FF 57) managed to gain rights to enter a manual proxy adress. Is it true, is it technically possible/a security flaw in addons that allows an addon to set a proxy?

Comment 1

[Daniel Veditz [:dveditz]]

What addons do you have installed?

Legacy add-ons certainly could do this, but they would be disabled in Firefox 57. Depending on how they were programmed the effects of setting a proxy preference could persist even once the add-on were disabled. In Firefox 57 only "Web Extensions" are allowed. There is a "proxy" ability but the Extension would have to request permission to use it when it was installed. Such an extension would not have changed the proxy preferences you can see.

Please open about:support (or "Troubleshooting Information" on the Help menu), find the "Extensions" section, and then copy the whole table and paste it into this bug.

Comment 2

[Dan]

Adblock Plus and New Tab Override. (2 addons) I haven't had the issue since I reported this bug, I check every few days now and proxy setting stays normal, no proxy adress entered. :) I think (hope) we don't have to worry anymore, Daniel. Sincerely, Daniel ;)

Comment 3

[Dan]

Adblock Plus	3.0.1	true	{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
New Tab Override	11.0.0	true	[e-mail]
AdBlock	3.8.0	false	jid1-NIfFY2CA8fy1tg@jetpack
AdBlocker for YouTube™	0.2.8	false	jid1-q4sG8pYhq8KGHs@jetpack
Add-on Compatibility Reporter	2.2.4	false	[e-mail]
DownThemAll!	3.0.8	false	{DDC359D1-844A-42a7-9AA1-88A850A938A8}
DownThemAll! v3.0b6 Windows 10 FIX	1.0.1	false	dta3noaero@vano
Flagfox	5.2.3	false	{1018e4d6-728f-4b20-ad56-37578a4de76b}
Flash and Video Download	3.0.1	false	{bee6eb20-01e0-ebd1-da83-080329fb9a3a}
Flash Player for YouTube™	0.1.5	false	jid1-h7qSFwT2a1FJOp@jetpack
Flash Video Downloader	16.0.5	false	[e-mail]
multilanguage text to speech (tts)	0.5.3	false	jid1-CmiOyUqkAs8aIw@jetpack
NewScrollbars (aka NoiaScrollbars)	1.2.8	false	NoiaScrollbars@ArisT2_Noia4dev
Performance-Analyser	1.6.1.1-signed.1-signed	false	jid1-ggfZ35HBOWTEfA@jetpack
ProxTube	4.0.5	false	[e-mail]
ReloadEvery	45.0.0	false	{888d99e7-e8b5-46a3-851e-1ec45da1e644}
Stylish- Benutzerdef. Motive f. jede Webseite	3.0.1	false	{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}
Stylus	1.1.6.1	false	{7a7a4a92-a2a0-41d1-9fd7-1e92480d612d}
Tab Counter	1.9.9.3	false	tabcounter@morac
Tab Mix Plus	0.5.0.4	false	{dc572301-7619-498c-a57d-39143191b318}
Tab To Window	1.2.9.1-signed.1-signed	false	[e-mail]
Text to Speech (TTS)	0.1.7	false	jid1-dqs9BdQga04hBw@jetpack
User-Agent Switcher	0.2.0	false	{75afe46a-7a50-4c6b-b866-c43a1075b071}
Video DownloadHelper	7.0.0	false	{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
Yahoo! Mail Notifier	1.0.7.4.1-signed.1-let-fixed.1-signed	false	{89f8dde0-010a-11da-8cd6-0800200c9a66}
Youtube	0.0.1	false	@youtubecolor
Youtube Flash Switch	1.4	false	[e-mail]
Youtube Mp3 Downloader	0.1	false	[e-mail]
YouTube™ Anywhere Player	3.0	false	{c9d31470-81c6-4e3e-9a37-46eb9237ed3a}
ZenMate Security, Privacy & Unblock VPN	5.10.4	false	[e-mail]

Comment 4

[Daniel Veditz [:dveditz]]

"ProxTube" sounds like something that would set a proxy (which legacy add-ons absolutely were allowed to do). Even though it's disabled it may not have cleaned up after itself--bad hygiene from add-on developers is one of the reasons we're switching to Web Extensions.

Comment 5

[Dan]

Well funny thing, I have proxtube disabled since many weeks now already, and I still get ads when clicking on YouTube video... Or could NewTabOverride or Enhancer for YouTube cause this?

Comment 6

[Dan]

(I DO have AdBlock Plus set up in a correct way)