539558 - Add-on install countdown should not be triggered when source is add-ons manager

Status: RESOLVED WONTFIX

(Toolkit :: Add-ons Manager, defect)

Description

[Alex Limi (:limi) — Firefox UX Team]

Currently, Firefox does a countdown before it enables the "Install" button for add-ons. This is to counter clickjacking (ie. the "punch the monkey" problem), so people don't accidentally install new add-ons from untrusted web sites.

However, we also do this for add-ons installed from within the add-ons manager, which makes no sense, and just slows down the user.

I would also argue that we shouldn't show the countdown for add-ons that originate from add-ons.mozilla.org, but at the very least we should remove it from the ones triggered in the add-ons manager.

Comment 2

[Mike Beltzner [:beltzner, not reading bugmail]]

Agree that we shouldn't do the countdown if the add-on is sourced from any of *.mozilla.org or *.mozilla.com, or initiated from within the add-ons discovery functionality of the EM.

Comment 3

[Jesse Ruderman]

We should skip the delay for installations from Firefox's UI.

For installations from addons.mozilla.org, see bug 561177.

Comment 4

[Jesse Ruderman]

Dup of bug 359475?

Comment 5

[Wayne Mery (:wsmwk)]

limi, should this bug also block cuts-addons?


(In reply to comment #4)
> Dup of bug 359475?

definitely the same. if it is not a blocker, dupe forward?

Comment 6

[Graham Perrin]

Review time :-)

Considerations: 

<https://github.com/mozilla/addons-server/>
<https://github.com/mozilla/addons-frontend/>

– in particular, from <https://github.com/mozilla/addons-server/issues/2661#issuecomment-333374083>: 

> … Eventually the new frontend will power both mobile and desktop, …

Comment 7

[Andy McKay]

We've got rid of the countdown everywhere, right?