Closed Bug 815181 Opened 12 years ago Closed 7 years ago

Personas (Backgrounds themes) and XPIs should not share a whitelist

Categories

(Toolkit :: Add-ons Manager, defect)

Product:
Toolkit
Component:
Add-ons Manager
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED DUPLICATE of bug 522522

People

(Reporter: mkaply, Unassigned)

Details

Currently the installation of backgrounds/personas from a site requires that they be on the xpinstall whitelist.

This creates problems:

1. A user has to manually add sites to this list - there is no UI to do it when a site attempts to install a persona.

2. It creates a security problem where a site might encourage a user to enable the site for xpinstall for personas, but they then have permission to install XPIs as well.

3. It effectively means that Mozilla is the only company that can distribute personas/background themes.

There should be separate permissions for Backgrounds and XPIs.
Status: NEW → RESOLVED
Closed: 7 years ago
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.