Closed Bug 1529582 Opened 10 months ago Closed 10 months ago

Extension that is not allowed on PB is still allowed to set a non-extension URL as the homepage

Categories

(WebExtensions :: General, defect, P1)

67 Branch
defect

Tracking

(firefox65 disabled, firefox66 disabled, firefox67 verified)

VERIFIED FIXED
mozilla67
Tracking Status
firefox65 --- disabled
firefox66 --- disabled
firefox67 --- verified

People

(Reporter: cbadescu, Assigned: mixedpuppy)

References

(Blocks 1 open bug)

Details

Attachments

(3 files)

Attached video 2019-02-21_14h39_01.mp4

[Affected versions]:

  • Firefox 67.0a1 (20190220040540)

[Affected platforms]:

  • Win 7 64-bit
  • Mac OS X 10.13.6

[Steps to reproduce]:
1.Install an extension that overrides the homepage with a non-extension url.
2.Make sure ‘extensions.allowPrivateBrowsingByDefault’ is set to false.
3.In about:addons navigate to the detailed page of the extension.
4.Check if “Don’t Allow” radio buttons is checked.
5.Open a private web page..
6.Click on the Home Page button.

[Expected results]:

  • The default home page is displayed.

[Actual results]:

  • The home page with a non-extension url is displayed.

Please see the attached video.

Assignee: nobody → mixedpuppy
Priority: -- → P1
Pushed by scaraveo@mozilla.com:
https://hg.mozilla.org/integration/autoland/rev/9e315d7f9e8a
prevent addon-set external home pages in private browsing without permission r=rpl,Gijs
Status: NEW → RESOLVED
Closed: 10 months ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla67
Attached image Bug1529582.gif

This issue is verified as fixed on Firefox 67.0a1 (20190305092747) under Win 7 64-bit and Mac OS X 10.14.1.

Please see the attached video.

Status: RESOLVED → VERIFIED
You need to log in before you can comment on or make changes to this bug.