Only install an add-on if the hash from the manifests matches the download

RESOLVED FIXED

Status

Mozilla Labs
Labs Pack
RESOLVED FIXED
7 years ago
7 years ago

People

(Reporter: Mardak, Assigned: Mardak)

Tracking

Dependency tree / graph

Details

(Assignee)

Description

7 years ago
Now that we have a way to make sure the manifest is from Mozilla with bug 600034, we can include hashes in the manifest to ensure the downloaded .xpi is what was expected.
(Assignee)

Comment 1

7 years ago
http://hg.mozilla.org/labs/sigma/rev/7833539dfa02
Give AddonManager the sha1 hash from the manifest to let it verify the file hash on download.
Assignee: nobody → edilee
Status: NEW → RESOLVED
Last Resolved: 7 years ago
Resolution: --- → FIXED
(Assignee)

Updated

7 years ago
Blocks: 602625
You need to log in before you can comment on or make changes to this bug.