update patch does install without proper notification




Add-ons Manager
14 years ago
10 years ago


(Reporter: Peter6, Assigned: dveditz)


Firefox Tracking Flags

(Not tracked)




14 years ago
1.Use a branchbuild Win32 Firefox from before 20040707
to install the shellblock patch.
3.The extension:
a) is unsigned, wich is not good for an official extension
b) installs as intended, but the "extension" is only highlighted for a fraction
of a second before it disappears from the extensionmanager panel.

based on .3 either the extension is installed succesfully or has failed
(different bug).
Unless you look in about:config you can never be sure it is installed.

Suggestion, especially for security patches, as soon as the extension/patch is
installed a popup should appear either confirming the completed installation of
the patch or tell you to close Firefox and restart to complete installation.

In case of the latter, a popup should appear as soon as you open FF telling you
that the securitypatch is installed.
Silently installing is something that belongs to IE ;-) , show the user what
happens and he will feel more secure.

Comment 1

14 years ago
I wonder why is this a EM bug? It is clearly a shellblock.xpi "bug". That patch
is using old-style install.js, that's why it is not listed in EM, that's by design.
It could use alert() in install.js to tell it was successfully installed.
And how's this a "major loss of function"?
Finally, it is not relevant now, imo.
I suggest resolving this as invalid.

Comment 2

14 years ago
Hard to tell, we haven't had a security patch in a while so I can't tell how it
will behave when it happens.
I know a lot of people installed this extension over and over again because they
thought it had failed.

Comment 3

14 years ago
It will behave the same, unless the install logic of patch itself is chagned. It
is not a EM bug. It needs to be moved to more appropriate component or invalid'ated.

It's not a bug, it's a kind of feedback on extension, shellblock.xpi. Do you
know who made shellblock? This is his.

Comment 4

14 years ago
No I don't have the privs to access the bug that was involved.
I'm pretty sure Ben should know.

I agree that EM is not the proper component, but at the time I didn't know
anything better.
Feel free to change the component.

Comment 5

14 years ago
dveditz: I'm guessing this is WONTFIX for shellblock.xpi, but it would be nice
if future hotfixes were signed by mozilla.org and said "hotfix applied
successfully" at some point.
Assignee: bugs → dveditz

Comment 6

13 years ago
Yes, what Jesse said. 
Last Resolved: 13 years ago
Resolution: --- → WONTFIX
Product: Firefox → Toolkit
You need to log in before you can comment on or make changes to this bug.