Closed Bug 602383 Opened 14 years ago Closed 14 years ago

Only install an add-on if the hash from the manifests matches the download

Categories

(Mozilla Labs :: Labs Pack, defect)

Product:
Mozilla Labs
Component:
Labs Pack
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

Status:
RESOLVED FIXED

People

(Reporter: Mardak, Assigned: Mardak)

References

Details

Now that we have a way to make sure the manifest is from Mozilla with bug 600034, we can include hashes in the manifest to ensure the downloaded .xpi is what was expected.
http://hg.mozilla.org/labs/sigma/rev/7833539dfa02
Give AddonManager the sha1 hash from the manifest to let it verify the file hash on download.
Assignee: nobody → edilee
Status: NEW → RESOLVED
Closed: 14 years ago
Resolution: --- → FIXED
Blocks: 602625
You need to log in before you can comment on or make changes to this bug.