1799345 - Decide if using `browserAction.openPopup` without a user gesture should require a permission

Status: RESOLVED WORKSFORME

(WebExtensions :: General, task)

Description

[[e-mail]]

In https://phabricator.services.mozilla.com/D139796 a new behaviour was added where the browserAction.openPopup API can be called without a user gesture requirement. :robwu: suggested it may be desirable to put this behind a permission, to help both users and reviewers notice that an extension has this capability.

Notably this does not currently require a permission in Chrome's WIP implementation or the shipping implementation in Safari 16+.

Comment 1

[Rob Wu [:robwu]]

We decided that there is no need for a separate permission for the browserAction.openPopup / action.openPopup APIs.

Extensions already have plenty of ways to annoy the user, the extension popup is not significantly worse.