265356 - XPI whitelist should support protocol restrictions

Status: RESOLVED INCOMPLETE

(Core Graveyard :: Installer: XPInstall Engine, enhancement)

Description

[Jesse Ruderman]

I'd like to whitelist https://update.mozilla.org/ but not
http://update.mozilla.org/.  I don't see a way to do this.  If I try to add
"https://update.mozilla.org/" to the whitelist, only "update.mozilla.org"
appears in the whitelist, and http://update.mozilla.org/ is able to show the
extension install dialog.

For bonus points, if I have https://update.mozilla.org/ whitelisted and try to
install something from http://update.mozilla.org/, show a strong warning in the
"add this site to the whitelist" dialog.

Comment 1

[Daniel Veditz [:dveditz]]

The whitelisting happens at the backend. Currently this uses the permission
manager shared with cookies, image blocking, popup whitelisting, etc and is
incapable of protocol distinctions.