268583 - update.mozilla.org not shown in XPI Whitelist

Status: RESOLVED WORKSFORME

(Toolkit :: Application Update, defect)

Description

[u49640]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; de-DE; rv:1.7.5) Gecko/20041108 Firefox/1.0
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; de-DE; rv:1.7.5) Gecko/20041108 Firefox/1.0

I dont know if its done on purpose or not, but the Whitelist for SW installation
is empty on 1.0 German, so insntalling extensions from u.m.o isnt possible
unless the user adds it to the whitelist

Reproducible: Always
Steps to Reproduce:
1.
2.
3.

Comment 1

[Patrick]

according to bug 265358 it should be there?
Also look at 
http://lxr.mozilla.org/aviarybranch/source/browser/app/profile/firefox.js#119

Did you have any previous versions of Firefox installed?

Comment 2

[Patrick]

darn, shoot first, ask questions later...
Forgot to ask: how did you check?

The update.mozilla.org is defined in "Firefox\defaults\pref\firefox.js"
Look if it's there?

As far as i know, the ones you see in about:config are only the ones the user
added him/herself.

Maybe your problem is something else: there's a bug out there which says that if
you block referrer info [either via firewall or pref], the update won't work.

Comment 3

[Patrick]

sorry for the bugspam, but at least your report is taken serious ;)

Couldn't find the bug number earlier, but i realized it wasn't filed under Firefox.
Have a look at bug 257633 please?

Comment 4

[u49640]

no, this was a clean install. 
this PC never had any mozilla software installed

i'll try it on other PCs to see if it was just somethinf with this PC

btw: changin OS to Win2k, i posted it from my XP pc, but the affected PC was
Win2k SP4 + all patches from windowsupdate

i've looked at the list in Firefox's preferences and it was empty. (i cant check
it now, but i'll verify it tomorrow when i'm back at work)

Comment 5

[u49640]

just to clarify: i didnt try to install an extention, i just opened the options
to look at them

Comment 6

[u49640]

i've just reproduced it on my XP PC

1) remove your profile
2) start firefox, dont import anything
3) goto the XPI whitelist

--> its empty

i cant reach u.m.o right now, so i cant verify if its just missing from the
list, or if its not allowed to install extentions

>The update.mozilla.org is defined in "Firefox\defaults\pref\firefox.js"
> Look if it's there?

yes it has pref("xpinstall.whitelist.add", "update.mozilla.org"); in it, but its
not in the list in my options

Comment 7

[u49640]

sorry to spam, but it happend on my Mac too

changin os to all (havent checked it on Linux, but its probably there too)

Comment 8

[u49640]

ok, checked it again: 
update.mozilla.org is on the whitelist, but its missing from the list in
Tools/options

i dont know if this is by design, or not (so either wontfix or confirm) but i
think it should appear on this list

Comment 9

[Patrick]

(In reply to comment #8)
> ok, checked it again: 
> update.mozilla.org is on the whitelist, but its missing from the list in
> Tools/options
> 
> i dont know if this is by design, or not (so either wontfix or confirm) but i
> think it should appear on this list

see my comment 4 "As far as i know, the ones you see in about:config are only
the ones the user added him/herself." The same would then probably apply to the
ones you see in OPTIONS.

I guess the reason that you don't see update.mozilla.org in OPTIONS is by
design: if that list showed you the _full_ list of trusted sites, you could
accidentally remove update.m.o. from it.

If that is so, then the current situation is indeed confusing. 
This bug should then be changed somewhat and ask for a different wording on the
dialog, so it specifies that this is not the FULL list, but only the
user-provided list. Are you ok with that?

Comment 10

[u49640]

yes, feel free to change it. (i've changed it, but if you find a better title
feel free to change it to something better)

i was confused becuase u.m.o was allways on this list before and now its missing.

maybe it should say that u.m.o is allways allowed or something like this

Comment 11

[Daniel Wang]

In Mozilla 1.8a5, disabling software installation wipes out
"xpinstall.whitelist.add", so nothing can install even after you enable it. In
today's nightly build, Mozilla doesn't have such problem. Maybe related?

Comment 12

[Yuliy Pisetsky]

what's the point of not showing u.m.o on that list? If you remove it, then if
you try installing it will tell you that it's not on the list.

Comment 13

[Daniel Veditz [:dveditz] (OOO: back Aug 26)]

The initial bug was on a fresh install. The whitelist (hostperm.1) file is not
updated from the prefs until an install attempt forces a check to see if
something needs to be added.

This bug is WFM. I suppose it could be morphed to an RFE that opening the
whitelist dialog should also check the pref to see if the hostperm file needs
updating. Reopen if you're volunteering to do the work, but realistically I
don't see it happening.