1658229 - Extension tabs should not appear in history ui

Status: VERIFIED FIXED

(Firefox :: Bookmarks & History, defect, P3)

Description

[Alice0775 White]

[Tracking Requested - why for this release]: Extension settings are unexpectedly initialized when doing "Forgot About This Site" on moz-extension://xxx

Reproducible: always

Steps To Reproduce:

1. Install https://addons.mozilla.org/en-US/firefox/addon/gesturefy/

2. Open about:addons > Extensions

3. Click on … menu of the extension's tile and Choose "Options" so that the extensions option will open in tab

4. Change any settings of the extensions and Close this tab

5. Open Library (Ctrl+Shift+H) so that history libraly window will pop up.

6. Right click on "moz-extension://***" and choose "Forgot About This Site"

7. Open the extensions option again (Repeat step 3.)
   --- observe, all settings are default

Actual Results:
Extension settings are initialized.

Expected Results:
Should not. Extension settings are preserved

Regression window:
https://hg.mozilla.org/integration/autoland/pushloghtml?fromchange=02f46362fdb0c35a8e4dd208f0de70827a75d1a1&tochange=bb7b37cfeea0f1597dc599af2148755eeca30420

Comment 1

[Julien Cristau [:jcristau]]

Tom is this expected?

Comment 2

[Tom Tung [:tt, :ttung]]

Hi,

Thanks for reporting!

IIUC, in step 6, you removed the storage/persisted data for the extension. I don't understand why you think the extension setting should be preserved after step 6. Would you mind elaborating more on that?

Comment 3

[Alice0775 White]

What is "This Site" in "Forgot About This Site" ?
Is "This site" and "This Extension" same? I thought "The Site" means "Website".

And "removed the storage/persisted data for the extension" is not all true.
For example, User Styles of Stylus extension are not removed even if execute "Forgot About This Site" on moz-extension://181ae023-c69a-475c-80b0-f6df227bda35/.
I'm very confused because some of the data in the extension will be removed and some will not.

I recommend
"Forgot About This Site" menu should be disabled(or hidden) on hitory item of "extension://xxx".

Comment 4

[Tom Tung [:tt, :ttung]]

(In reply to Alice0775 White from comment #3)
Thanks for clarifying!

What is "This Site" in "Forgot About This Site" ?
Is "This site" and "This Extension" same? I thought "The Site" means "Website".

I see where you are coming from, but it's probably I use the wrong words for describing this.

So, the site, in this case, refer to the setting page for "gesturefy" and it's "moz-extension://2f19ccb1-5761-8542-86f6-963cf51a29c2/views/options/html/index.html#Settings". And it uses indexedDB to store its settings, so the extension settings are initialized once you execute the "forget this site" for the URL.

However, I am not really sure if my understanding is correct so I defer this question to Johann.

And "removed the storage/persisted data for the extension" is not all true.
For example, User Styles of Stylus extension are not removed even if execute "Forgot About This Site" on moz-extension://181ae023-c69a-475c-80b0-f6df227bda35/.
I'm very confused because some of the data in the extension will be removed and some will not.

It can be an issue for Data Sanitization on "Styles of Stylus" and that would require someone to look into which API that "Styles of Stylus" uses to store the data. From the expectation of the implementation, it expects these storage types to be removed

I am pretty sure that the DOM storage for it has been removed once I execute "Forgot About This Site" on moz-extension://181ae023-c69a-475c-80b0-f6df227bda35/. (You can verify/observe that by checking if the directory in ${profile}/storage/default/moz-extension+++181ae023-c69a-475c-80b0-f6df227bda35 is removed after the execution)

I recommend
"Forgot About This Site" menu should be disabled(or hidden) on hitory item of "extension://xxx".

Johann, what do you think about this?

Comment 5

[Tom Tung [:tt, :ttung]]

It's not regressed by bug 1628240. Actually, bug 1628240 corrects the behavior for the operation on clearing DOM storage.

If we don't want to remove the setting for the extension on "Forget about this site", we can either filter out the moz-extension's URLs.

Comment 6

[123hhhh123hhhh]

I agree with Alice0775 that this behaviour is unexpected. At least I stumbled upon this as well and it took me a while to understand why one of my addon's prefereneces were reset.

Many users just want to use the Browser without actually looking up how to determine which extension is hiding behind an alpha-numeric string though.

Comment 7

[Tom Tung [:tt, :ttung]]

Redirect needinfo requet to Tim

Comment 8

[Jim Mathies [:jimm]]

Hey Shane, something web extensions related filed outside your components.

Comment 9

[Shane Caraveo (:mixedpuppy)]

moz-extension urls should not show up in history, same as about pages, etc. I don't see this as a data sanitisation bug, forget is working exactly as it should. It might be that we don't want to allow extension data to be removed, but that would be product decision on our end. I'll move the bug for triage.

Comment 10

[Tim Huang[:timhuang]]

I agree that we shouldn't treat extension pages as "Sites". So, disabling the "Forget About This Site" for moz-extension urls seems reasonable to me. But, I think what Shane mentioned in comment 9 is a better approach that we don't show moz-extension urls in history.

Comment 11

[Shane Caraveo (:mixedpuppy)]

Per comment 9, we need to prevent moz-extension scheme from being added to history. That should also result in extension tabs not appearing in history UI, similar to about: tabs.

Comment 12

[Marco Bonardo [:mak]]

it should be as easy as adding here
https://searchfox.org/mozilla-central/rev/f27594d62e7f1d57626889255ce6a3071d67209f/toolkit/components/places/nsNavHistory.cpp#921-927
Though this is only for desktop

Comment 14

[Mark Banner (:standard8)]

Attachment: Bug 1658229 - Exclude moz-extension:// urls from being saved in history. r?mak!

Comment 15

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/76f2bb2215b5
Exclude moz-extension:// urls from being saved in history. r=mak

Comment 16

[Cristian Brindusan [:cbrindusan]]

https://hg.mozilla.org/mozilla-central/rev/76f2bb2215b5

Comment 17

[BugBot [:suhaib / :marco/ :calixte]]

Since the status are different for nightly and release, what's the status for beta?
For more information, please visit auto_nag documentation.

Comment 18

[Bogdan Maris, Desktop QA [Holiday+PTO 1-6 May]]

Reproduced the initial issue using old Nightly build before the fix, verified that this is fixed now on Firefox 83.0b10 across platforms (windows 10 64bit, Ubuntu 18.04 and macOS 11.0) by not having moz-extension:// urls in history.