1749434 - enterprise policy extension deny origins

Status: NEW

(WebExtensions :: Untriaged, enhancement, P5)

Description

[[e-mail]]

Steps to reproduce:

1. Ask corporate IT to install an extension
2. Corporate IT says the extension cannot be permitted to operate on certain customer-data-hosting web sites
3. Search for a Firefox setting to make that setup possible

Actual results:

It is not possible to configure Firefox to allow an extension to operate on all URLs excepting a certain restricted subset via Enterprise Policy. If the extension author has selected "all origins", the extension will run everywhere except certain privleged pages (like about:addons).

Expected results:

It should have been possible to configure the policies.json file to cause installations of the extension to be inactive when the browser visits certain origins.

Comment 1

[Bryan Jacobs]

Attachment: Bug 1749434 - Add support for denying origins. r?#extension-reviewers

This adds support for policies.json to have "denied origins" for particular
extensions. When an enterprise configures this, the extension will be
deactivated for contexts matching the given origin wildcards.

This allows organization administrators to prevent certain extensions from
operating on, for example, internal Intranet sites.

Comment 2

[BugBot [:suhaib / :marco/ :calixte]]

The Bugbug bot thinks this bug should belong to the 'Firefox::Enterprise Policies' component, and is moving the bug to that component. Please revert this change in case you think the bot is wrong.

Comment 3

[Shane Caraveo (:mixedpuppy)]

This is more specific to (and extensive within) the extensions framework, moving to our module.

Comment 4

[BugBot [:suhaib / :marco/ :calixte]]

The bug assignee is inactive on Bugzilla, so the assignee is being reset.

Comment 5

[Tomislav Jovanovic :zombie]

This is not exactly a duplicate, but will be based on logic implemented in bug 1745823.

Comment 6

[BugBot [:suhaib / :marco/ :calixte]]

The bug assignee is inactive on Bugzilla, so the assignee is being reset.