3 ms·

Javascript is notoriously hard to analyze, and it's not clear to me that Firefox should want to isolate extensions from each other - yes, it stops the most obvi

Javascript is notoriously hard to analyze, and it's not clear to me that Firefox should want to isolate extensions from each other - yes, it stops the most obvious form of this attack, but it also makes it impossible to integrate things other than by making one mega-extension.

ryuuchin 10y ago
> it's not clear to me that Firefox should want to isolate extensions from each other I think it's more interesting that the new(?) extension API (Jetpack) which was supposed to provide extension isolation is also apparently vulnerable to this. If you want to make isolating extensions from each other opt-in then ok but it should at least be able to do what it's designed to do.