Closed Bug 1616735 Opened 5 years ago Closed 5 years ago

Extension Block Request: Ratings Preview for YouTube™

Categories

(Toolkit :: Blocklist Policy Requests, task)

Product:
Toolkit
Component:
Blocklist Policy Requests
Type:
task
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED FIXED

People

(Reporter: jscher2000, Assigned: TheOne)

Details
Extension name Ratings Preview for YouTube™
Extension versions affected 6.1.5
Platforms affected <all platforms>
Block severity hard

Reason

Version 6.1.5 introduced two questionable features that were not present in 6.1 (there was a change of owner):

(A) Search hijack (reviews complain about this)

background.js:545-573

Listens for webRequest with q=value in URL.searchParams and redirects to securedwebsearch.com.

There is no opt-in/opt-out for this behavior. It is not disclosed on the AMO listing AFAICT.

(B) Google Analytics without Privacy Policy on AMO

background.js:515-542

POSTs a pageview to Google Analytics at startup. This is not disclosed on the AMO listing AFAICT.

Extension IDs

jid0-G6461UajDjhNAwSukoedlkhD0XA@jetpack

Additional Information

I don't know whether a hard block is warranted, but unavoidable search hijacking seems to meet the criteria.

Thank you for the report!

Assignee: nobody → awagner
Status: UNCONFIRMED → ASSIGNED
Ever confirmed: true

This add-on violates Mozilla’s add-on policies by overriding search behavior without user consent or control and by collecting ancillary user data against our policies.

The block has been staged. Mark, can you review and push?

Flags: needinfo?(mgoodwin)
Status: ASSIGNED → RESOLVED
Closed: 5 years ago
Flags: needinfo?(mgoodwin)
Resolution: --- → FIXED
Group: blocklist-requests
You need to log in before you can comment on or make changes to this bug.