398365 - Notify user that plugins have been disabled due to blocklisting

Status: VERIFIED DUPLICATE of bug 391714

(Toolkit :: Add-ons Manager, defect)

Description

[Mike Beltzner [:beltzner, not reading bugmail]]

Comment 2

[Mike Beltzner [:beltzner, not reading bugmail]]

Spun off from bug 391714 comment 6, see also bug 391714 comment 3 for
motivation.

When we blocklist a plugin, users should be notified so that they can take
immediate action to upgrade to a secure version of the plugin.

Pros: informs a user that the plugin is insecure and encourages them to upgrade
or uninstall, which benefits system health overall.

Cons: an upgrade may not be available at the time of the blocklisting (since
the vendor may not have a patched version ready), the plugin being blocked may
be rarely or not used by the user, making the information less relevant to
them.

Nominating for blocking, but not sure if this is the best thing to do.

Comment 3

[Mike Beltzner [:beltzner, not reading bugmail]]

(to be clear, this isn't a dupe, reed just got confused because I hit enter a little too quickly and didn't have any text in comment 0)

Comment 4

[Mike Beltzner [:beltzner, not reading bugmail]]

Bah, it is a dupe.

Comment 5

[Stephen Donner [:stephend] Not actively reading bugmail]

Verified