909771 - We can access user browsing information in Private Mode with our implemented extension hence the extensions are not disabled by default in Private mode.

Status: RESOLVED DUPLICATE of bug 822675

(Toolkit :: Add-ons Manager, defect)

Description

[Ehsan Toreini]

User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:23.0) Gecko/20100101 Firefox/23.0 (Beta/Release)
Build ID: 20130814063812

Steps to reproduce:

We have implemented a Firefox extension to record detailed user activities during browsing and use that in private mode.


Actual results:

since the extensions are not disabled in Private Mode by default, we can access the same information as normal mode, in private mode. It could be harmful to user privacy in many cases.


Expected results:

Ideally, we recommend the extensions to be disabled by default in Private Mode.

Comment 1

[Benjamin Smedberg]

This does not need to be private. Extensions are encouraged to participate in private-mode browsing, and in our current architecture cannot be disabled per-window like this. We expose private-browser mode in the browser SDK so that addons can modify their behavior to respect private browsing mode.