Closed Bug 1696445 Opened 5 years ago Closed 4 years ago

Extension permission help page should expand "Access all data" definition

Categories

(support.mozilla.org :: Knowledge Base Content, task)

Tracking

(Not tracked)

RESOLVED FIXED

People

(Reporter: dveditz, Assigned: caitmuenster)

Details

referring to our "Permission request messages for Firefox extensions" page
https://support.mozilla.org/en-US/kb/permission-request-messages-firefox-extensions

The sections at the top talking about "Access your data for..." mention information that is on that specific page the user browsed to, and passwords entered on it, but it goes much further. Such scripts can also access cookies and localstorage, or make requests back to the server for more data that doesn't appear on the page.

The extension can read the content of any web page you visit as well as data you enter into those web pages, such as usernames and passwords.

Could add something like: The extension can also access any data stored by the site, such as cookies, or account information stored on the server.

Imho, the support page message structure is wrong, because, actually it describes each permission, distinctly... where some users can think them by exclusions.

Example: Since there is a distinct permission for cookies, if that permission isn't asked, it isn't relevant, then maybe acceptable.

Thanks for flagging; I can take this.

Assignee: nobody → cneiman

Closing outdated request.

Status: NEW → RESOLVED
Closed: 4 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.