Closed Bug 1455121 Opened 7 years ago Closed 8 months ago

Prevent updates from themes to webextensions

Categories

(Toolkit :: Add-ons Manager, enhancement, P3)

enhancement

Tracking

()

RESOLVED DUPLICATE of bug 1750565

People

(Reporter: aswan, Unassigned)

References

Details

I haven't verified this but from inspection it looks like a theme can be updated to a webextension. We would still show a permission prompt if the extension has any promptable permissions but this is probably something we just shouldn't allow at all.
Priority: -- → P3
Severity: normal → S3

I fixed this in bug 1750565, by disallowing add-on type changes on update.

Note that there was a unit test that tests the reverse, the "update theme to extension" scenario, which I removed in bug 1903794 because it is no longer possible to encounter that scenario in practice.

Status: NEW → RESOLVED
Closed: 8 months ago
Duplicate of bug: CVE-2022-22754
Resolution: --- → DUPLICATE
See Also: → 1903794
You need to log in before you can comment on or make changes to this bug.