1483191 - Extension block request: Search hijacking add-ons

Status: RESOLVED FIXED

(Toolkit :: Blocklist Policy Requests, task)

Description

[Zitronella]

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0
Build ID: 20180807170231

Steps to reproduce:

on ****s://s3.amazonaws.com/olrf/de/index.html (**** = http)
sourceCode is encrypted
but it installs in fullscreen mode a extension named "Soc" with ID {ff87977a-fefb-4a9d-b703-4b73dce8853d} from ****://s3.amazonaws.com/ffext/smashde1.xpi

meantime the website is blocked by Google Safe Browsing




Actual results:

Install extension in full screen mode


Expected results:

block search hijacking extension

Comment 1

[Andreas Wagner [:TheOne] [use NI]]

Clones:

{1a3fb414-0945-405c-a62a-9fe5e1a50c69}
{1a45f6aa-d80a-4317-84d2-0ce43671b08a}
{2d52a462-8bec-4708-9cd1-894b682bdc78}
{3f841cfc-de5a-421f-8bd7-2bf1d943b02a}
{5c7601bf-522b-47e5-b0f0-ea0e706af443}
{7ebe580f-71c9-4ef8-8073-f38deaeb9dfb}
{8b2188fd-1daf-4851-b387-28d964014353}
{8cee42ac-f1fe-40ae-aed6-24e3b76b2f77}
{8d13c4a9-5e8c-47a6-b583-681c83164ac9}
{9b1d775a-1877-45c9-ad48-d6fcfa4fff39}
{9efdbe5f-6e51-4a35-a41b-71dc939e6221}
{23f63efb-156e-440b-a96c-118bebc21057}
{026dfc8c-ecc8-41ba-b45f-70ffbd5cc672}
{34aa433c-27e9-4c87-a662-9f82f99eb9af}
{36f34d69-f22f-47c3-b4cd-4f37b7676107}
{39bd8607-0af4-4d6b-bd69-9a63c1825d3c}
{48c6ad6d-297c-4074-8fef-ca5f07683859}
{54aa688d-9504-481d-ba75-cfee421b98e0}
{59f59748-e6a8-4b41-87b5-9baadd75ddef}
{61d99407-1231-4edc-acc8-ab96cbbcf151}
{68ca8e3a-397a-4135-a3af-b6e4068a1eae}
{71beafd6-779b-4b7d-a78b-18a107277b59}
{83ed90f8-b07e-4c45-ba6b-ba2fe12cebb6}
{231dfb44-98e0-4bc4-b6ee-1dac4a836b08}
{273f0bce-33f4-45f6-ae03-df67df3864c2}
{392f4252-c731-4715-9f8d-d5815f766abb}
{484ec5d0-4cfd-4d96-88d0-a349bfc33780}
{569dbf47-cc10-41c4-8fd5-5f6cf4a833c7}
{578cad7a-57d5-404d-8dda-4d30de33b0c2}
{986b2c3f-e335-4b39-b3ad-46caf809d3aa}
{1091c11f-5983-410e-a715-0968754cff54}
{2330eb8a-e3fe-4b2e-9f17-9ddbfb96e6f5}
{5920b042-0af1-4658-97c1-602315d3b93d}
{6331a47f-8aae-490c-a9ad-eae786b4349f}
{6698b988-c3ef-4e1f-8740-08d52719eab5}
{30516f71-88d4-489b-a27f-d00a63ad459f}
{12089699-5570-4bf6-890f-07e7f674aa6e}
{84887738-92bf-4903-a5e8-695fd078c657}
{8562e48e-3723-412a-9ebd-b33d3d3b29dd}
{6e449795-c545-41be-92c0-5d467c147389}
{1e369c7c-6b61-436e-8978-4640687670d6}
{a03d427a-bd2e-42b6-828f-a57f38fac7b5}
{a77fc9b9-6ebb-418d-b0b6-86311c191158}
{a368025b-9828-43a1-8a5c-f6fab61c9be9}
{b1908b02-410d-4778-8856-7e259fbf471d}
{b9425ace-c2e9-4ec4-b564-4062546f4eca}
{b9845b5d-70c9-419c-a9a5-98ea8ee5cc01}
{ba99fee7-9806-4e32-8257-a33ffc3b8539}
{bdf8767d-ae4c-4d45-8f95-0ba29b910600}
{c6c4a718-cf91-4648-aa9b-170d66163cf2}
{ca0f2988-e1a8-4e83-afde-0dca56a17d5f}
{cac5db09-979b-40e3-8c8e-d96397b0eecb}
{d3b5280b-f8d8-4669-bdf6-91f23ae58042}
{d73d2f6a-ea24-4b1b-8c76-563fce9f786d}
{d77fed37-85c0-4b94-89bb-0d2849472b8d}
{d371abec-84bb-481b-acbf-235639451127}
{de47a3b4-dad1-4f4a-bdd6-8666586e29e8}
{ded6afad-2aaa-446b-b6bd-b12a8a61c945}
{e0c3a1ca-8e21-4d1b-b53b-ea115cf59172}
{e6bbf496-6489-4b48-8e5a-799aad4aa742}
{e63b262a-f9b8-4496-9c4b-9d3cbd6aea90}
{e73c1b5d-20f7-4d86-ad16-9de3c27718e2}
{eb01dc49-688f-4a21-aa8d-49bd88a8f319}
{edc9816b-60b4-493c-a090-01125e0b8018}
{effa2f97-0f07-44c8-99cb-32ac760a0621}
{f6e6fd9b-b89f-4e8d-9257-01405bc139a6}
{ff87977a-fefb-4a9d-b703-4b73dce8853d}
{ffea9e62-e516-4238-88a7-d6f9346f4955}

Comment 2

[Andreas Wagner [:TheOne] [use NI]]

The block has been staged. Philipp, can you please review and push?

Comment 3

[Philipp Kewisch [:Fallen] [:📆][:🧩]]

Done