Closed Bug 1506560 Opened 7 years ago Closed 7 years ago

Block extensions that include a malicious copy of jquery

Categories

(Toolkit :: Blocklist Policy Requests, enhancement)

Product:
Toolkit
Component:
Blocklist Policy Requests
Type:
enhancement
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED FIXED

People

(Reporter: TheOne, Assigned: TheOne)

Details

(Whiteboard: [extension])

Add-ons with the following IDs include a malicious copy of jQuery which triggers execution of remote code: video-downloader@vd.io image-search-reverse@an.br YouTube.Downloader@2.8 eMoji@ems-al.io Those should be hard-blocked.
The block has been staged. Stuart, could you please review it?
Flags: needinfo?(scolville)
Approved and pushed
Status: NEW → RESOLVED
Closed: 7 years ago
Flags: needinfo?(scolville)
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.