Closed Bug 1580616 Opened 5 years ago Closed 5 years ago

Extension Block Request: YUI

Categories

(Toolkit :: Blocklist Policy Requests, task)

Product:
Toolkit
Component:
Blocklist Policy Requests
Type:
task
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED FIXED

People

(Reporter: zitrobugs, Assigned: TheOne)

Details
Extension name YUI
Extension versions affected <all versions>
Platforms affected <all platforms>
Block severity hard

Reason

obfuscated code
At the moment seems extension will do nothing, because link in it (6.js) is not active.
But if site will be changed i assume it will be search hijacking and remote script injection, because it is similar to
https://bugzilla.mozilla.org/show_bug.cgi?id=1571130

Extension IDs

{23db2a76-49ca-4af2-af50-fccedd607e12}
Assignee: nobody → awagner
Status: NEW → ASSIGNED

I’ve reviewed the add-on and confirmed that it is executing remote code.

The block has been pushed.

Group: blocklist-requests
Status: ASSIGNED → RESOLVED
Closed: 5 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.