Open Bug 1467417 Opened 3 years ago Updated 2 years ago

Optionally allow WebExtensions to block requests from other extensions

Categories

(WebExtensions :: Request Handling, enhancement, P3)

enhancement

Tracking

(Not tracked)

UNCONFIRMED

People

(Reporter: c4609174, Unassigned)

References

(Depends on 1 open bug)

Details

(Whiteboard: [privacy])

As discussed in https://discourse.mozilla.org/t/side-view-privacy-features/29171, the current "Side View" add-on has a big problem:

Tracking blockes or other add-ons cannot access the side bar.

IMHO, this is really bad, as it is a fundamental privacy issue for such add-ons which basically only load third-party content.

So it would be great if add-ons have a way to declare that other WebExtensions can do stuff on their web pages. I imagine it like this:

* "Side View" sets a property in their manifest (or so) for their sidebar/popup etc. like "addon_access" = true.
* PrivacyBadger, uBlock Origin and other add-ons can use a new permission – or some kind of host permission, whatever – to access these and block trackers, etc.

In such a way, everything would stay backwards-compatible.
Component: Untriaged → WebExtensions: Untriaged
Product: Firefox → Toolkit
Depends on: 1318532
Product: Toolkit → WebExtensions
Component: Untriaged → Request Handling
Summary: Optionally allow WebExtensions to access other add-on's HTML → Optionally allow WebExtensions to block requests from other extensions
Priority: -- → P3
Whiteboard: [privacy]
Duplicate of this bug: 1540547
You need to log in before you can comment on or make changes to this bug.