1558543 - Extension Block Request: skrill, vpn, avast, adobe flash player

Status: RESOLVED FIXED

(Toolkit :: Blocklist Policy Requests, task)

Description

[Sylvain Giroux [:Spoji]]

Extension name	skrill, vpn, avast, adobe flash player
Extension versions affected	<all versions>
Platforms affected	<all platforms>
Block severity	hard

Reason

Sending user private information, including credentials, from online forms to a third party url.

Extension IDs

{43c62192-abed-474e-a619-9d486383f5d2}
{9506f10a-e5c1-4a0a-83e7-8e83b3fb77d2}
{a4fd5625-6912-4cc3-861e-f5338e4c36f8}
{2ff20211-5540-4c13-8c06-6769902b0e15}
{e15e3074-88a0-4a6d-bd1f-a7149eff3a6a}
{e5800ff7-8cf3-410c-91a6-4b61838e4486}
{22754446-97f4-473f-8da2-3ffbd44abdc3}
{eea1ab8b-a4bd-4905-aa02-80874a452fff}
{b0bfaa8c-702e-47ea-84ff-6b20ef979385}
{f13622f7-470e-4ad3-85a5-25a0fd43f9fa}
{f75cba29-48aa-4c02-8d7e-704532de1aa6}
{43325b83-0f60-4d46-9b43-f9be2e91682c}

Additional Information

They are all coming from the same user :
15052085

https://addons.mozilla.org/en-US/firefox/user/15052085/

The problem inside the code can be found inside tuto.js

Comment 1

[Andreas Wagner [:TheOne] [use NI]]

I’ve reviewed the add-ons and confirmed they are collecting ancillary user data against our policies.

Comment 2

[Andreas Wagner [:TheOne] [use NI]]

The block has been staged. Philipp, can you review and push?

Comment 3

[Philipp Kewisch [:Fallen][☁️📆]]

Done