Extension permission help page should expand "Access all data" definition
Categories
(support.mozilla.org :: Knowledge Base Content, task)
Tracking
(Not tracked)
People
(Reporter: dveditz, Assigned: caitmuenster)
Details
referring to our "Permission request messages for Firefox extensions" page
https://support.mozilla.org/en-US/kb/permission-request-messages-firefox-extensions
The sections at the top talking about "Access your data for..." mention information that is on that specific page the user browsed to, and passwords entered on it, but it goes much further. Such scripts can also access cookies and localstorage, or make requests back to the server for more data that doesn't appear on the page.
The extension can read the content of any web page you visit as well as data you enter into those web pages, such as usernames and passwords.
Could add something like: The extension can also access any data stored by the site, such as cookies, or account information stored on the server.
Comment 1•5 years ago
|
||
Imho, the support page message structure is wrong, because, actually it describes each permission, distinctly... where some users can think them by exclusions.
Example: Since there is a distinct permission for cookies, if that permission isn't asked, it isn't relevant, then maybe acceptable.
Comment 3•4 years ago
|
||
Closing outdated request.
Description
•