1665055 - Uninstall an extension forced by organization in a Firefox monitored browser

Status: RESOLVED DUPLICATE of bug 1658768

(Toolkit :: Add-ons Manager, defect)

Description

[villani.mario90]

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:80.0) Gecko/20100101 Firefox/80.0

Steps to reproduce:

By clicking near "Why?" text i managed to uninstall an extension installed by my organization in a monitored Firefox browser.
It is easily reproducible by clicking near the hyperlink (but not directly on it) as i show in my PoC video.

Actual results:

I managed to uninstall the extension without issues.

Expected results:

Firefox should have blocked the uninstall procedure at all.

Comment 1

[villani.mario90]

Attachment: PoC Video

Comment 2

[villani.mario90]

Comment on attachment 9175716 [details]
PoC Video

https://drive.google.com/file/d/1YGBWzUirmQeX4NsAMhrG83QpVZeTPv0F/view?usp=sharing

Comment 3

[:Gijs (he/him)]

The video is not accessible without signing in. It's also not clear from comment #0 what specific UI you meant (we have a number of places where enterprise policy notifications may be visible).

Comment 4

[villani.mario90]

(In reply to :Gijs (he/him) from comment #3)

The video is not accessible without signing in. It's also not clear from comment #0 what specific UI you meant (we have a number of places where enterprise policy notifications may be visible).

Video is now accessible even without signin.

Comment 5

[:Gijs (he/him)]

:zombie, do you know what's going on here? This seems to be about how we handle clicks on the uninstall menuitem in the add-on manager when it is supposed to be disabled.

Comment 6

[villani.mario90]

Ex(In reply to :Gijs (he/him) from comment #5)

:zombie, do you know what's going on here? This seems to be about how we handle clicks on the uninstall menuitem in the add-on manager when it is supposed to be disabled.

Exactly. The uninstall action is still clickable in a small area of the menuitem. However, even if it seems a GUI issue, Firefox should block the action, even if the uninstall function gets called.

Comment 7

[Mike Kaply [:mkaply]]

See https://bugzilla.mozilla.org/show_bug.cgi?id=1658768

Comment 8

[:Gijs (he/him)]

Looks like there's a public bug about this, so let's dupe it over...