I discovered yesterday that I could do this. It should be done.
Can you explain what it does?
Without it, every WebExtension has access to browser.browserAction (for example), even if that makes no sense. Only WebExtensions that have a browser action (defined in the manifest) should be see browser.browserAction. That's what it does.
Attachment #9032249 - Flags: review?(mkmelin+mozilla) → review+
Pushed by firstname.lastname@example.org: https://hg.mozilla.org/comm-central/rev/3df0e93306f9 Restrict access to APIs where a manifest key is required; r=mkmelin
Status: ASSIGNED → RESOLVED
Closed: 7 months ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.