1931545 - Add userScripts permission notice in about:addons

Status: VERIFIED FIXED

(Toolkit :: Add-ons Manager, task, P2)

Description

[Rob Wu [:robwu]]

Bug 1917000 will introduce an optional-only userScripts permission with the message "Allow unverified third-party scripts to access your data".

We should add an extra warning underneath the permission with the following text:

Unverified scripts can pose security and privacy risks, such as running harmful code or tracking website activity. Only run scripts from extensions or sources you trust.

A mock is shown at the left of the image in https://bugzilla.mozilla.org/show_bug.cgi?id=1917000#c2

The permission message and notice will also be re-used for the permission prompt shown in that mock, but that will be implemented in a separate bug.

Comment 1

[Rob Wu [:robwu]]

Attachment: Bug 1931545 - Add extra warning next to the "userScripts" permission in about:addons

Comment 2

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/d031e0512ae9
Add extra warning next to the "userScripts" permission in about:addons r=rpl,fluent-reviewers,desktop-theme-reviewers,bolsson,hjones

Comment 3

[amarc]

https://hg.mozilla.org/mozilla-central/rev/d031e0512ae9

Comment 4

[Alex Cornestean]

Verified as Fixed. Tested on the latest Nightly (135.0a1/20241223212718) under Windows 10, Ubuntu 24.04 LTS and macOS 11.3.1.

In about:addons, the “Permissions” tab in the detailed view of the add-on implementing userScripts now features the “userScripts” optional permission with the “Allow unverified third-party scripts to access your data” message followed underneath by a warning message stating “Unverified scripts can pose security and privacy risks, such as running harmful code or tracking website activity. Only run scripts from extensions or sources you trust.”, confirming the fix.

For more details, see the attached screenshot.

Comment 5

[Alex Cornestean]

Attachment: 2024-12-24_11h36_47.png